Malicious PDF — malware analysis report

Static analysis result for SHA-256 b54267da213f1980…

MALICIOUS

PDF

31.8 KB Created: 2019-05-05 16:47:43 +01:00 Authoring application: mPDF 5.7
MD5: c1e1b24bf2816a12d0ce469a196ed2e6 SHA-1: a3047b44f979ea3648b2d98208759134621bfed2 SHA-256: b54267da213f1980c02f07f9199ff50af5173789fa76ad276079a02ce306ded4
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1204.002 User Execution: Malicious File

The PDF contains a large number of embedded links to external PDF files, hosted on a dynamic DNS domain. This behavior is indicative of a link farm or SEO poisoning attack, designed to drive traffic to malicious or low-quality content. The ML classifier also flagged this PDF as malicious with high confidence.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9873

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/7093092094090091/Qualite-Composants-Et-Technologie-Electronique-Quality-Components-and-Electronic-Technology-by-Centre-National-D-Etudes-Spatiales.pdf
    • http://loaminoo.linkpc.net/7093092093090096/Qualit-mon-Q-Apprenez-r-sister-la-domination-d-guis-e-en-D-marche-Qualit-by-Dominique-Dupagne.pdf
    • http://loaminoo.linkpc.net/1091091093094092095/Integrated-Digital-Electronics-Prentice-Hall-series-in-electronic-technology-by-Walter-A-Treibel.pdf
    • http://loaminoo.linkpc.net/1090095095097098093/Unsolved-Problems-of-Co--And-Graft-Polymerization-Proceedings-of-the-First-S-R-Romanian-U-S-Seminar-on-Polymer-Science-Held-Under-the-Sponsorship-of-the-Romanian-National-Council-for-Science-and-Technology-Ncst-and-the-U-S-National-Science-Found-by-Otto-Vogl.pdf
    • http://loaminoo.linkpc.net/8093095090094098/Water-Quality-of-the-Chokosna-Gilahina-Lakina-Rivers-and-Long-Lake-Watershed-Along-McCarthy-Road-Wrangell--St-Elias-National-Park-and-Preserve-Alaska-2007-08-by-Timothy-P-Brabets.pdf
    • http://loaminoo.linkpc.net/7091091094099095/Epeios-Et-Philoctete-En-Italie-Donnees-Archeologiques-Et-Traditions-Legendaires-Actes-Du-Colloque-International-Du-Centre-De-Recherches-Archeologiques-Du-Centre-Jean-Berard-by-Juliette-de-La-Geni-re.pdf
    • http://loaminoo.linkpc.net/8096094095094091/Enhancing-Quality-of-Web-Service-Based-Cooperative-Business-Processes--Definition-and-Monitoring-of-Quality-Constraints-by-Tobias-Berr.pdf
    • http://loaminoo.linkpc.net/2093097097095099/Crossing-the-Quality-Chasm-A-New-Health-System-for-the-21st-Century-by-Committee-on-Quality-of-Health-Care-in-America.pdf
    • http://loaminoo.linkpc.net/5097093094098091/Axiomatic-Quality-Integrating-Axiomatic-Design-with-Six-Sigma-Reliability-and-Quality-Engineering-by-Basem-S-El-Haik.pdf
    • http://loaminoo.linkpc.net/8095090097092096/Jean-Paul-Riopelle-Peinture-1946-1977-Musee-national-d-art-moderne-Centre-Georges-Pompidou-Paris-30-septembre-16-novembre-1981-Musee-du-juillet-1982-22-aout-1982-by-Jean-Paul-Riopelle.pdf
    • http://loaminoo.linkpc.net/6099099090093094/National-Geographic-Guide-to-the-National-Parks-of-the-United-States-by-National-Geographic-Society.pdf
    • http://loaminoo.linkpc.net/7093092092093093/Politique-Qualit-by-Kris.pdf
    • http://loaminoo.linkpc.net/8095090090099099/Free-Technology-for-Libraries-Library-Technology-Essentials-by-Amy-Deschenes.pdf
    • http://loaminoo.linkpc.net/7097098095099095/Tangerine-Dream-Pionnier-de-la-musique-lectronique-by-stephane-poitou.pdf
    • http://loaminoo.linkpc.net/7093092093099095/Aromath-rapie-de-qualit-mais-petit-budget-by-Marie-FOIT.pdf
    • http://loaminoo.linkpc.net/1090097094094091090/Die-Bierbrauerei-Band-2-Die-Technologie-der-W-rzebereitung-by-Ludwig-Narziss.pdf
    • http://loaminoo.linkpc.net/5095091092093095/Les-navires-des-trangers-la-technologie-alien-by-Jos-Blazewicz.pdf
    • http://loaminoo.linkpc.net/1090097099099092091/Advanced-Google-Sketchup-for-Design-3D-Modeling-Components-Plugins-Rendering-and-Scripting-by-Alexander-Schreyer.pdf
    • http://loaminoo.linkpc.net/1090098091092095092/Facing-Up-To-The-Global-Challenge-The-State-Of-Kwa-Zulu-Natal-s-Automotive-Components-Industry-by-Justin-Barnes.pdf
    • http://loaminoo.linkpc.net/1091094090092090090/Die-Digitale-Falle-Treibt-Uns-Die-Technologie-in-Den-Wahnsinn-by-Larry-Rosen.pdf
    • http://loaminoo.linkpc.net/1090095095097098093/Unsolved-Problems-of-Co--And-Graft-Polymerization-Proceedings-of-the-First-S-R-Romanian-U-S-Seminar-on-Polymer-Science-Held-Under-the-Sponsorship-of-the-Romanian-National-Council-for-Science-and-Technology-Ncst-and-the-U-S-National-Science-

Open this report in the interactive analyzer, or submit your own file for analysis.