Malicious PDF — malware analysis report

Static analysis result for SHA-256 b7c3bebfe0aabedb…

MALICIOUS

PDF

17.4 KB Created: 2019-04-30 01:57:43 +01:00 Authoring application: mPDF 5.7 First seen: 2020-12-28
MD5: 543e71be24104f397cb5a529abb1d654 SHA-1: 819bf34c44454d701f952dfae950a28c463834d4 SHA-256: b7c3bebfe0aabedb6c7c9bd93af3795b0abb2b57c43190aa63b28b6c4d013efb
152 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded links, identified as a 'PDF_SEO_LINK_FARM' heuristic. While the URLs themselves are marked as benign, the sheer volume and the ML classifier's high confidence score indicate a malicious intent, likely to redirect users to malicious sites or for SEO manipulation. The ClamAV detection as 'Pdf.Dropper.Agent-9731168-0' further supports its malicious nature. No scripts were extracted, but the structure suggests a phishing or redirection attack.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 3

  • ClamAV: Pdf.Dropper.Agent-9731168-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Pdf.Dropper.Agent-9731168-0
  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/8094098090098099/Pati-s-Mexican-Table-The-Secrets-of-Real-Mexican-Home-Cooking-by-Pati-Jinich.pdf In PDF document text
    • http://loaminoo.linkpc.net/8094097099097094/Cooking-Mexican-How-to-Cook-with-Authentic-Mexican-Recipes-by-J-Mahoney.pdfIn PDF document text
    • http://loaminoo.linkpc.net/3090098096091090/My-Abuela-s-Table-An-Illustrated-Journey-into-Mexican-Cooking-by-Daniella-Germain.pdfIn PDF document text
    • http://loaminoo.linkpc.net/5090099095095090/Walls-and-Mirrors-Mexican-Americans-Mexican-Immigrants-and-the-Politics-of-Ethnicity-by-David-G-Guti-rrez.pdfIn PDF document text
    • http://loaminoo.linkpc.net/1090092097092096098/Mexican-Flavors-A-Journey-Inspired-by-the-Folklore-and-Traditions-of-Mexican-Cuisines-by-Laura-Anhalt.pdfIn PDF document text
    • http://loaminoo.linkpc.net/8094097099090099/The-Art-of-Mexican-Cooking-by-Diana-Kennedy.pdfIn PDF document text
    • http://loaminoo.linkpc.net/3090097095094097/The-Art-of-Mexican-Cooking-by-Diana-Kennedy.pdfIn PDF document text
    • http://loaminoo.linkpc.net/3096097092090093/Swords-Over-Fireshore-by-Pati-Nagle.pdfIn PDF document text
    • http://loaminoo.linkpc.net/3091090091096098/The-New-Complete-Book-of-Mexican-Cooking-by-Elisabeth-Lambert-Ortiz.pdfIn PDF document text
    • http://loaminoo.linkpc.net/3090099092099093/Adventures-in-Mexican-Cooking-Ortho-book-series-by-Angelo-Villa.pdfIn PDF document text
    • http://loaminoo.linkpc.net/8094097098090091/Authentic-Mexican-Regional-Cooking-from-the-Heart-of-Mexico-by-Rick-Bayless.pdfIn PDF document text
    • http://loaminoo.linkpc.net/5092097098092/Mestizos-Come-Home-Making-and-Claiming-Mexican-American-Identity-by-Robert-Con-Davis-Undiano.pdfIn PDF document text
    • http://loaminoo.linkpc.net/2095097095096093/The-Mexican-Pet-by-Jan-Harold-Brunvand.pdfIn PDF document text
    • http://loaminoo.linkpc.net/7090097096090099/Mexican-Textiles-by-Masako-Takahashi.pdfIn PDF document text
    • http://loaminoo.linkpc.net/1098098099092090/Mexican-Whiteboy-by-Matt-de-la-Pena.pdfIn PDF document text
    • http://loaminoo.linkpc.net/6097093093094/Gone-for-Soldiers-A-Novel-of-the-Mexican-War-by-Jeff-Shaara.pdfIn PDF document text
    • http://loaminoo.linkpc.net/1095098095097/Zapata-and-the-Mexican-Revolution-by-John-Womack.pdfIn PDF document text
    • http://loaminoo.linkpc.net/1090091096099092093/The-Mexican-War-1846-1848-by-Douglas-V-Meed.pdfIn PDF document text
    • http://loaminoo.linkpc.net/8092092090096096/The-Mexican-Revolution-1910-20-by-Philip-Jowett.pdfIn PDF document text
    • http://loaminoo.linkpc.net/1092091099096097/The-Witch-s-Face-A-Mexican-Tale-by-Eric-A-Kimmel.pdfIn PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.