Malicious PDF — malware analysis report

Static analysis result for SHA-256 b76eb49d07dc37a5…

MALICIOUS

PDF

17.1 KB Created: 2019-05-05 04:24:55 +01:00 Authoring application: mPDF 5.7
MD5: c742dab702ae2fb85f890feb33c6c9f7 SHA-1: 05e4b2652b3235f81f7418365142ed4d0c53289c SHA-256: b76eb49d07dc37a572c132708fc921f0749f0e86297a44ea6fa5d8c9ffad0d5f
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF contains a large number of embedded URLs pointing to external PDF files, a technique often used for SEO manipulation or to distribute malicious content. The ML classifier strongly indicated maliciousness. No scripts were extracted, and the document body was heavily obfuscated, preventing a deeper analysis of the specific lure.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/3099097098091090/Highland-Hunger-Game-One-Highland-Wars-1-1-by-Eliza-Knight.pdf
    • http://loaminoo.linkpc.net/4096096093098090/Knight-in-Highland-Armor-Highland-Dynasty-1-by-Amy-Jarecki.pdf
    • http://loaminoo.linkpc.net/3098093096093098/Beyond-the-Highland-Mist-To-Tame-a-Highland-Warrior-Highlander-1-2-by-Karen-Marie-Moning.pdf
    • http://loaminoo.linkpc.net/9094093090094091/Highland-Fever-Into-the-dreaming-die-Story-aus-der-Highland-Saga---endlich-auf-Deutsch-by-Karen-Marie-Moning.pdf
    • http://loaminoo.linkpc.net/4093096093093090/Temptation-of-a-Highland-Scoundrel-Highland-Warriors-2-by-Sue-Ellen-Welfonder.pdf
    • http://loaminoo.linkpc.net/1090095095090091099/A-Highland-Sailor-Highland-Heartbeats-6-by-Aileen-Adams.pdf
    • http://loaminoo.linkpc.net/2095092091097099/My-Highland-Lord-Highland-Lords-2-by-Tarah-Scott.pdf
    • http://loaminoo.linkpc.net/1091097098092095/Highland-Shift-Highland-Destiny-1-by-Laura-Harner.pdf
    • http://loaminoo.linkpc.net/2090091092090097/Highland-Wedding-Highland-Brides-2-by-Hannah-Howell.pdf
    • http://loaminoo.linkpc.net/2092097092097091/Highland-Healer-Highland-Talents-1-by-Willa-Blair.pdf
    • http://loaminoo.linkpc.net/2092097092097093/Highland-Seer-Highland-Talents-2-by-Willa-Blair.pdf
    • http://loaminoo.linkpc.net/2094099099095092/Highland-Heat-Highland-Knights-1-by-Jennifer-Haymore.pdf
    • http://loaminoo.linkpc.net/6092091096096/Highland-Fling-Highland-1-by-Amanda-Scott.pdf
    • http://loaminoo.linkpc.net/3090090090096097/Highland-Secrets-Highland-2-by-Amanda-Scott.pdf
    • http://loaminoo.linkpc.net/1094096096092095/The-Highland-Henchman-Highland-Force-2-by-Amy-Jarecki.pdf
    • http://loaminoo.linkpc.net/2092097092093097/The-Knight-Highland-Guard-7-5-by-Monica-McCarty.pdf
    • http://loaminoo.linkpc.net/7092099092097090/Tempted-by-a-Highland-Moon-A-Scottish-Historical-Romance-The-Highland-Moon-Series-Book-4-by-Gwyn-Brodie.pdf
    • http://loaminoo.linkpc.net/7092099093095090/Chasing-a-Highland-Moon-The-Highland-Moon-Series-Book-3-by-Gwyn-Brodie.pdf
    • http://loaminoo.linkpc.net/4094094097090099/Highland-Park-Presents-by-Fifth-Grade-of-Highland-Park.pdf
    • http://loaminoo.linkpc.net/2099094095094095/Highland-Wolf-Pact-Highland-Wolf-Pact-1-by-Selena-Kitt.pdf
    • http://loaminoo.linkpc.net/109109

Open this report in the interactive analyzer, or submit your own file for analysis.