Malicious PDF — malware analysis report

Static analysis result for SHA-256 bb3e60877efd73b0…

MALICIOUS

PDF

16.8 KB Created: 2019-04-29 23:32:16 +01:00 Authoring application: mPDF 5.7 First seen: 2021-04-10
MD5: af88cce62d1c7377df952217f9c9a529 SHA-1: c4ea63537ceaa083daeefbd403d6a53b0d2b3071 SHA-256: bb3e60877efd73b070e3ab14d324a3c66a1a3712b96a0a0217022ee1fb905e45
92 Risk Score

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/9093095093099093/Hiroshige-One-Hundred-Views-of-Edo-by-Mikhail-Uspensky.pdf In PDF document text
    • http://loaminoo.linkpc.net/9093095093098090/Hiroshige-by-Mikhail-Uspensky.pdfIn PDF document text
    • http://loaminoo.linkpc.net/9093095094096094/Down-the-Emperor-s-Road-With-Hiroshige-by-Hiroshige-And-.pdfIn PDF document text
    • http://loaminoo.linkpc.net/9093095093098097/The-Sketchbooks-of-Hiroshige-by-Hiroshige-Utagawa.pdfIn PDF document text
    • http://loaminoo.linkpc.net/7099092097095099/Moli-re-or-The-Cabal-of-Hypocrites-and-Don-Quixote-Two-Plays-by-Mikhail-Bulgakov-by-Mikhail-Bulgakov.pdfIn PDF document text
    • http://loaminoo.linkpc.net/7099092096093091/Mikhail-Bulgakov-Mikhail-Bulgakov-Bibliography-Bulgakov-Museum-in-Moscow-Mikhail-Bulgakov-Museum-by-Books-LLC.pdfIn PDF document text
    • http://loaminoo.linkpc.net/3094094091098097/Mikhail-Kuzmin-Selected-Writings-by-Mikhail-Kuzmin.pdfIn PDF document text
    • http://loaminoo.linkpc.net/1090094093097/The-Hundred-Year-Old-Man-Who-Climbed-Out-of-the-Window-and-Disappeared-The-Hundred-Year-Old-Man-1-by-Jonas-Jonasson.pdfIn PDF document text
    • http://loaminoo.linkpc.net/9093095093098096/Hiroshige-by-B-W-Robinson.pdfIn PDF document text
    • http://loaminoo.linkpc.net/9093095093099094/Hiroshige-Master-of-Nature-by-Gian-Calza.pdfIn PDF document text
    • http://loaminoo.linkpc.net/9093095094098096/Hiroshige-s-View-of-Tokyo-by-Oliver-Impey.pdfIn PDF document text
    • http://loaminoo.linkpc.net/9093095094097096/Utagawa-Hiroshige-The-Moon-Reflected-by-British-Museum.pdfIn PDF document text
    • http://loaminoo.linkpc.net/9093095094096095/Japanese-Masters-Hokusai-amp-Hiroshige-by-James-Underhill.pdfIn PDF document text
    • http://loaminoo.linkpc.net/9093095093099096/Hiroshige-s-Tokaido-in-Prints-and-Poetry-by-Reiko-Chiba.pdfIn PDF document text
    • http://loaminoo.linkpc.net/1092098099094092/My-One-Hundred-Adventures-My-One-Hundred-Adventures-1-by-Polly-Horvath.pdfIn PDF document text
    • http://loaminoo.linkpc.net/1097097091091091/A-Condo-with-Two-Views-by-Al-Daltrey.pdfIn PDF document text
    • http://loaminoo.linkpc.net/2095096094095095/Have-I-Got-Views-For-You-by-Boris-Johnson.pdfIn PDF document text
    • http://loaminoo.linkpc.net/1090093095091098098/Club-Views-by-Volker-Schrank.pdfIn PDF document text
    • http://loaminoo.linkpc.net/7099092095092094/Beg-Flight-by-Mikhail-Bulgakov.pdfIn PDF document text
    • http://loaminoo.linkpc.net/8098096098094098/God-and-the-State-by-Mikhail-Bakunin.pdfIn PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.