Malicious PDF — malware analysis report

Static analysis result for SHA-256 b562f26a757364c2…

MALICIOUS

PDF

26.0 KB Created: 2019-04-30 02:11:17 +01:00 Authoring application: mPDF 5.7
MD5: bcb86f8e196db1b51c5a8ec9966a8342 SHA-1: a81697a311a7ccdde3a06a448e0c19d2930d1a90 SHA-256: b562f26a757364c22f7e8da20a9436ad55d552ce16883ddeccac21f5cff91d80
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF contains a large number of embedded links, forming a link farm. The primary heuristic indicates this is a SEO-based link farm, likely intended to drive traffic to malicious or deceptive content. While the specific URLs extracted were benign, the pattern of a large link farm within a PDF is suspicious and indicative of a delivery mechanism for further malicious activity. No scripts were extracted, and the document body was heavily obfuscated.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9912

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/9099099095098/Standing-Up-with-Ga-axsta-las-Jane-Constance-Cook-and-the-Politics-of-Memory-Church-and-Custom-by-Leslie-A-Robertson.pdf
    • http://loaminoo.linkpc.net/4090094090091099/Ned-s-Circus-of-Marvels-Ned-s-Circus-of-Marvels-1-by-Justin-Fisher.pdf
    • http://loaminoo.linkpc.net/7090099098093096/The-Manifesto-Church-Records-of-the-Church-in-Brattle-Square-Boston-with-Lists-of-Communicants-Baptisms-Marriages-and-Funerals-1699-1872-by-Church-in-Brattle-Square.pdf
    • http://loaminoo.linkpc.net/7090099098094091/The-Manifesto-Church-Records-of-the-Church-in-Brattle-Square-Boston-With-Lists-of-Communicants-Baptisms-Marriages-and-Funerals-1699-1872-by-Church-in-Brattle-Square-Boston.pdf
    • http://loaminoo.linkpc.net/2093099095097/Marvels-by-Kurt-Busiek.pdf
    • http://loaminoo.linkpc.net/2094091097099093/The-Marvels-Project-by-Ed-Brubaker.pdf
    • http://loaminoo.linkpc.net/4097094091097098/Marvels-by-Kurt-Busiek.pdf
    • http://loaminoo.linkpc.net/5094092090097092/Church-Charism-and-Power-Liberation-Theology-and-the-Institutional-Church-by-Leonardo-Boff.pdf
    • http://loaminoo.linkpc.net/4096091093098/The-Book-of-Common-Prayer-and-Administration-of-the-Sacraments-and-Other-Rites-and-Ceremonies-of-the-Church-by-Church-of-England.pdf
    • http://loaminoo.linkpc.net/3096090096094090/Land-of-Marvels-by-Barry-Unsworth.pdf
    • http://loaminoo.linkpc.net/4092092092094093/Rediscovered-Early-Church-PreMillennialism-Teachings-of-the-Earliest-Church-Fathers-on-Prophecy-by-Robert-H-Franklin.pdf
    • http://loaminoo.linkpc.net/6091090097095093/Vertical-Church-What-Every-Heart-Longs-For-What-Every-Church-Can-Be-by-James-MacDonald.pdf
    • http://loaminoo.linkpc.net/3096090099097097/The-Purpose-Driven-Church-Every-Church-Is-Big-in-God-s-Eyes-by-Rick-Warren.pdf
    • http://loaminoo.linkpc.net/7090098097098095/The-Church-of-God-Or-Essays-on-Various-Names-and-Titles-Given-to-the-Church-in-the-Holy-Scriptures-To-Which-Are-Added-Some-Papers-on-Other-Subjects-by-Ambrose-Serle.pdf
    • http://loaminoo.linkpc.net/7090098098091092/The-Church-of-God-Or-Essays-on-Various-Names-and-Titles-Given-to-the-Church-in-the-Holy-Scriptures-To-Which-Are-Added-Some-Papers-on-Other-Subjects-by-Ambrose-Serle.pdf
    • http://loaminoo.linkpc.net/7094093097090/The-Magnificent-Nose-and-Other-Marvels-by-Anna-Fienberg.pdf
    • http://loaminoo.linkpc.net/3093092092092090/Modern-Marvels---Viktoriana-by-Wayne-Reinagel.pdf
    • http://loaminoo.linkpc.net/4091093093090096/Church-History-Volume-One-From-Christ-to-Pre-Reformation-The-Rise-and-Growth-of-the-Church-in-Its-Cultural-Intellectual-and-Political-Context-by-Everett-Ferguson.pdf
    • http://loaminoo.linkpc.net/2090097093092092/The-Marvels-Project-Birth-of-the-Super-Heroes-by-Ed-Brubaker.pdf
    • http://loaminoo.linkpc.net/9099091090098094/Studies-in-church-leadership-New-Testament-church-structure-Paul-and-his-coworkers-an-alternative-theological-education-a-critique-of-catholic-canon-law-by-Thomas-Schirrmacher.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.