Malicious PDF — malware analysis report

Static analysis result for SHA-256 b2d8e9f87ffd63ae…

MALICIOUS

PDF

30.8 KB Created: 2019-05-02 14:17:39 +01:00 Authoring application: mPDF 5.7
MD5: 9fa1d4fbe813d1e33223dcf3fccc78d8 SHA-1: 64ec60b441840435ad1fba8abe6429354e33a7ab SHA-256: b2d8e9f87ffd63ae96d450de09ab9b3c2afb9b1c0a83c8a1da0158d0fc3c641d
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF was flagged by a machine learning classifier and contains a large number of embedded external links, indicative of a link farm. The primary heuristic indicates a 'PDF_SEO_LINK_FARM' with 32 links, suggesting the document's purpose is to redirect users to a network of other PDFs. While the specific malicious payload is not directly executed from this PDF, the extensive link farm suggests a distribution or SEO manipulation tactic, potentially leading to malicious content or phishing sites.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9885

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/1091092098094093095/En-amour-comme-la-guerre-Livre-1-Je-n-ai-jamais-t-dou-pour-faire-ce-qu-on-me-disait-by-Liz-Levoy.pdf
    • http://loaminoo.linkpc.net/7097096093090098/Le-grand-livre-de-la-technique-vocale-Voix-parl-e-et-voix-chant-e---Principe-pour-respirer-techniques-pour-poser-sa-voix-conseils-pour-rythmer-son-discours-by-Herv-Pata.pdf
    • http://loaminoo.linkpc.net/5093097091091093/Soyez-femme-mais-pensez-comme-un-homme-Ce-que-les-hommes-pensent-r-ellement-de-l-amour-des-relations-de-l-intimit-et-de-l-engagement-by-Steve-Harvey.pdf
    • http://loaminoo.linkpc.net/7097093090094099/Comme-chien-et-chat-Un-d-fi-impossible---Une-si-troublante-v-t-rinaire---Pour-le-sourire-d-Emmy-by-Hannah-Bernard.pdf
    • http://loaminoo.linkpc.net/8092098090095092/Les-Interests-de-l-Angleterre-Mal-Entendus-Dans-La-Present-Guerre-Traduits-Du-Livre-Anglois-Intitul-Englands-Interest-Mestaken-En-the-Present-War-by-Dubos.pdf
    • http://loaminoo.linkpc.net/6095097091095092/Ventre-vide-comme-une-main-de-fer-dans-un-gant-de-velours-des-femmes-dans-l-amour-et-la-mort-by-Audrey-Gaillard.pdf
    • http://loaminoo.linkpc.net/8095090099095092/COMMENT-M-DITER-UN-GUIDE-PRATIQUE-POUR-FAIRE-LA-PAIX-AVEC-SON-MENTAL-by-Pema-Ch-dr-n.pdf
    • http://loaminoo.linkpc.net/4098094091092099/Romance-rotique-Les-R-gles-d-Ars-ne-Livre-1-Pour-elle-by-Kiss-and-Love-Books.pdf
    • http://loaminoo.linkpc.net/7099093092092099/Chocolate-amp-Zucchini-Le-Livre-Plus-de-75-recettes-pour-cuisiner-sain-raffin-et-gourmand-by-Clotilde-Dusoulier.pdf
    • http://loaminoo.linkpc.net/1090096092098092093/Mimi-volume-un-un-livre-d-histoires-en-images-pour-les-petits-gar-ons-et-les-petites-filles-by-Dr-Howey.pdf
    • http://loaminoo.linkpc.net/7097093099094093/Benny-et-ses-crottes-de-nez-un-livre-pour-enfants-avec-des-illustrations-et-des-rimes-idiotes-by-Xavier-Finkley.pdf
    • http://loaminoo.linkpc.net/5096096093092096/Petit-Livre-de---Islam-sagesses-d-amour-sagesses-soufies-by-Malek-Chebel.pdf
    • http://loaminoo.linkpc.net/1091092098095099091/101-Secrets-of-a-High-Performance-Dental-Practice-From-the-Success-Files-of-Bob-Levoy-by-Robert-P-Levoy.pdf
    • http://loaminoo.linkpc.net/7091097098090092/Le-Livre-Anti-Toxique-Alimentation-Cosmetiques-Maison-Le-Guide-Complet-Pour-En-Finir-Avec-Les-Poisons-by-Laurent-Chevallier.pdf
    • http://loaminoo.linkpc.net/7095093095091091/Pour-l-amour-de-Claire-Traduit-de-l-anglais-Etats-Unis-par-Simone-Arous-by-Edwidge-Danticat.pdf
    • http://loaminoo.linkpc.net/7092098097092092/Livre-pour-enfant-quot-Alex-et-le-l-zard-quot-by-Kiria-Foxie.pdf
    • http://loaminoo.linkpc.net/7092098097091099/L-zards-Un-Livre-Pour-Les-Enfants-Avec-De-Superbes-Photos-amp-Des-Faits-Divertissants-Au-sujet-Des-L-zards-by-Caroline-Norsk.pdf
    • http://loaminoo.linkpc.net/7098090096091096/Comment-devenir-m-dium-ou-voyant-Le-livre-intiatique-quot-magique-quot-pour-acqu-rir-imm-diatement-des-facult-s-m-diumniques-by-J-C.pdf
    • http://loaminoo.linkpc.net/1091092098095099090/Illustrated-Catalogue-of-the-de-Camp-Levoy-and-Co-Wholesale-Manufacturers-of-Saddlery-Harness-and-Collars-of-Every-Decription-by-De-Camp-Levoy-and-Company.pdf
    • http://loaminoo.linkpc.net/7090099090093093/The-Queen-of-the-Faire-Faire-Folk-Saga-7-by-Gillian-Summers.pdf
    • http://loaminoo.linkpc.net/7097093090094099/Comme-chien-et-chat-Un-d-fi-impossible---Une-si-troublante-v-t-rinaire---Pour-le-sourire-d-Emmy-

Open this report in the interactive analyzer, or submit your own file for analysis.