Malicious PDF — malware analysis report

Static analysis result for SHA-256 c086183660112f75…

MALICIOUS

PDF

17.6 KB Created: 2019-05-02 17:08:51 +01:00 Authoring application: mPDF 5.7
MD5: a60687e70045d70dc7b54fcf6e83e323 SHA-1: 7837ebf036a810e4473d303723432dd4c11f406e SHA-256: c086183660112f750c4636cb41ab585386af5c49d69aedc701f1a7d6725efd57
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1059.001 PowerShell

The PDF was flagged by a machine learning classifier as malicious and contains a large number of external links, many of which point to book titles. This suggests a potential SEO manipulation or content distribution scheme. The primary attack pattern involves directing users to a large number of external PDFs hosted on the 'loaminoo.linkpc.net' domain. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/3096098093098094/The-Fate-Of-Nations-F-I-R-E-Team-Alpha-Book-One-by-Ray-Chilensky.pdf
    • http://loaminoo.linkpc.net/4093093099095096/Wyatt-NAC-amp-The-Holly-Group-Alpha-Team-Book-3-by-Chelsea-Handcock.pdf
    • http://loaminoo.linkpc.net/4097094094091097/Seventh-Blessed-Warriors-Book-One-by-Ray-Chilensky.pdf
    • http://loaminoo.linkpc.net/1091091098096090091/Ladylust-4-Alpha-Males-The-Big-Bundle-of-Hetero-Erotica-About-Macho-Alpha-Studs-Alpha-Male-Hetero-Big-Bundles-Book-6-by-B-R-Eastman.pdf
    • http://loaminoo.linkpc.net/1098097099099096/Fate-Book-Two-Fate-Book-2-by-Mimi-Jean-Pamfiloff.pdf
    • http://loaminoo.linkpc.net/6099097090095093/Code-Name-Antares-Grant-Stevens-and-Team-Alpha-Tango-by-Jamie-Fredric.pdf
    • http://loaminoo.linkpc.net/4093093097097097/Sugar-s-Fate-Sexy-Alpha-Shifters-Love-BBW-1-by-P-T-Macias.pdf
    • http://loaminoo.linkpc.net/6097090094095096/The-League-of-Nations-The-Controversial-History-of-the-Failed-Organization-that-Preceded-the-United-Nations-by-Charles-River-Editors.pdf
    • http://loaminoo.linkpc.net/3097093095095099/Adventure-Time-Team-Jake-Team-Finn-Joke-Book-by-Adventure-Time.pdf
    • http://loaminoo.linkpc.net/4099099094097/Dead-Nations-Army-Book-One-Code-Flesh-by-Alan-Dale.pdf
    • http://loaminoo.linkpc.net/1095095093092091/Dead-Nations-Army-Book-One-Code-Flesh-by-Alan-Dale.pdf
    • http://loaminoo.linkpc.net/3091098091093096/The-Book-of-Fate-by-Brad-Meltzer.pdf
    • http://loaminoo.linkpc.net/4090091096090095/The-Book-of-Fate-by-Parinoush-Saniee.pdf
    • http://loaminoo.linkpc.net/3093090097096094/17-Essential-Qualities-of-a-Team-Player-Becoming-the-Kind-of-Person-Every-Team-Wants-by-John-C-Maxwell.pdf
    • http://loaminoo.linkpc.net/4098094092094092/Alpha-Packed-Book-3-by-Darla-Dunbar.pdf
    • http://loaminoo.linkpc.net/4098094092094094/Alpha-Packed-Book-2-by-Darla-Dunbar.pdf
    • http://loaminoo.linkpc.net/4091094096092095/Team-Niklas-The-Saints-Team-3-by-Ally-Adams.pdf
    • http://loaminoo.linkpc.net/3090099093096091/Fight-By-The-Team-Team-Fear-2-by-Cindy-Skaggs.pdf
    • http://loaminoo.linkpc.net/9090098096099092/Nightfall-Heart-of-the-Alpha-Book-1-by-Evelyn-Glass.pdf
    • http://loaminoo.linkpc.net/2097090094098091/My-Only-Regret-Twisted-Fate-Book-1-by-Rhonda-James.pdf
    • http://loaminoo.linkpc.net/6097090094095096/The-League-of-Nations-The-Controversial-History-of-the-Failed-Organization-that-Preceded-the-United-N

Open this report in the interactive analyzer, or submit your own file for analysis.