Malicious PDF — malware analysis report

Static analysis result for SHA-256 be5fc471498505e9…

MALICIOUS

PDF

16.0 KB Created: 2019-04-30 03:13:39 +01:00 Authoring application: mPDF 5.7
MD5: d32c1e18b02107f0845441d7c4e8face SHA-1: e6ad6b0c20cbff07c298ba5e0e60a2b81e8f75de SHA-256: be5fc471498505e9d3c33952bf45923506775e8785eb76d80c097ccc9c9dc11a
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF file contains a large number of embedded links pointing to external PDF documents hosted on the domain 'loaminoo.linkpc.net'. This behavior is indicative of a link farm or a phishing lure designed to direct users to potentially malicious content. The ML classifier also flagged this PDF as malicious with a high probability.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9898

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/2096096098094/An-Exile-on-Planet-Earth-Articles-and-Reflections-by-Brian-W-Aldiss.pdf
    • http://loaminoo.linkpc.net/1098096094097092/Brian-Aldiss-Presents-Britain-s-Leading-SF-Exponent-Presents-his-Favourite-Stories-by-Brian-W-Aldiss.pdf
    • http://loaminoo.linkpc.net/3092092098091091/Greybeard-by-Brian-W-Aldiss.pdf
    • http://loaminoo.linkpc.net/4090091090098090/Last-Orders-by-Brian-W-Aldiss.pdf
    • http://loaminoo.linkpc.net/3098096098092095/Cryptozoic-by-Brian-W-Aldiss.pdf
    • http://loaminoo.linkpc.net/4090099096094098/Equator-and-Segregation-by-Brian-W-Aldiss.pdf
    • http://loaminoo.linkpc.net/3096099099098/The-Hand-Reared-Boy-by-Brian-W-Aldiss.pdf
    • http://loaminoo.linkpc.net/5094098093098/Barefoot-in-the-Head-by-Brian-W-Aldiss.pdf
    • http://loaminoo.linkpc.net/2095090092092/Enemies-of-the-System-by-Brian-W-Aldiss.pdf
    • http://loaminoo.linkpc.net/4094094094092097/Brothers-of-the-Head-by-Brian-W-Aldiss.pdf
    • http://loaminoo.linkpc.net/6097095097090091/Frankenstein-Unbound-by-Brian-W-Aldiss.pdf
    • http://loaminoo.linkpc.net/4095096099094091/Galaxies-Like-Grains-of-Sand-by-Brian-W-Aldiss.pdf
    • http://loaminoo.linkpc.net/4090099096096092/Space-Time-And-Nathaniel-by-Brian-W-Aldiss.pdf
    • http://loaminoo.linkpc.net/4095094096092093/Planet-of-Exile-by-Ursula-K-Le-Guin.pdf
    • http://loaminoo.linkpc.net/1099093097098093/Mysteries-Of-The-Hollow-Earth-Egs1004-Hollow-Earth-Expedition-by-Exile-Game-Studio.pdf
    • http://loaminoo.linkpc.net/6095091096095094/Escaping-Japan-Reflections-on-Estrangement-and-Exile-in-the-Twenty-First-Century-Japan-Anthropology-Workshop-Series-by-Blai-Guarn-.pdf
    • http://loaminoo.linkpc.net/3094091098097095/Saving-Planet-Earth-by-Tony-Juniper.pdf
    • http://loaminoo.linkpc.net/2092092098098098/The-Late-Great-Planet-Earth-by-Hal-Lindsey.pdf
    • http://loaminoo.linkpc.net/2095098096093092/The-Living-Planet-A-Portrait-of-the-Earth-by-David-Attenborough.pdf
    • http://loaminoo.linkpc.net/5092090094099092/Hello-is-this-planet-Earth-My-View-from-the-International-Space-Station-by-Tim-Peake.pdf
    • http://loaminoo.linkpc.net/6097095097090091/Frankenstein-

Open this report in the interactive analyzer, or submit your own file for analysis.