Malicious PDF — malware analysis report

Static analysis result for SHA-256 c0a074cfeee34d49…

MALICIOUS

PDF

14.9 KB Created: 2019-04-30 05:22:56 +01:00 Authoring application: mPDF 5.7
MD5: fa7dd9a52e072f6b96ec7dcf5a479d1e SHA-1: 172dcef6623d2f72f84aa87346789fbc6c1b3520 SHA-256: c0a074cfeee34d4907acf80ebb4aae10f383ff23e4ea0cc5fe5670fa93dc65df
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF contains a large number of embedded external links, identified as a link farm. The ML classifier also flagged this PDF as malicious. The primary attack pattern involves directing users to a multitude of external URLs, likely for SEO manipulation or to host further malicious content.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9891

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/9098095093090095/The-Island-of-Doctor-Moreau-by-H-G-Wells-Illustrated-Delphi-Parts-Edition-H-G-Wells-by-H-G-Wells.pdf
    • http://loaminoo.linkpc.net/3094091098090/The-Island-of-Dr-Moreau-by-H-G-Wells.pdf
    • http://loaminoo.linkpc.net/2097092097092095/The-Island-of-Dr-Moreau-by-H-G-Wells.pdf
    • http://loaminoo.linkpc.net/1097096093093090/The-Island-of-Dr-Moreau-by-H-G-Wells.pdf
    • http://loaminoo.linkpc.net/4090099092093095/The-Island-of-Dr-Moreau-by-H-G-Wells.pdf
    • http://loaminoo.linkpc.net/9097096093096095/The-Island-of-Dr-Moreau-by-H-G-Wells.pdf
    • http://loaminoo.linkpc.net/3095098092090094/The-Island-of-Doctor-Moreau-by-H-G-Wells.pdf
    • http://loaminoo.linkpc.net/1090094092090096094/The-Island-of-Doctor-Moreau-with-eBook-by-H-G-Wells.pdf
    • http://loaminoo.linkpc.net/8090098090098097/The-Island-of-Doctor-Moreau-Annotated-Student-and-Teacher-Edition-by-H-G-Wells.pdf
    • http://loaminoo.linkpc.net/9092092090090096/The-Island-of-Doctor-Moreau-1000-Copy-Limited-Edition-by-H-G-Wells.pdf
    • http://loaminoo.linkpc.net/8090093090099096/The-Island-of-Doctor-Moreau-Color-Illustrated-Formatted-for-E-Readers-by-H-G-Wells.pdf
    • http://loaminoo.linkpc.net/3093092094092096/Island-Tales-Vol-1-by-K-C-Wells.pdf
    • http://loaminoo.linkpc.net/4091098095097094/Submitting-to-the-Darkness-Island-Tales-3-by-K-C-Wells.pdf
    • http://loaminoo.linkpc.net/5097099097099096/The-Time-Machine-By-H-G-Wells---Illustrated-Bonus-Free-Audiobook-by-H-G-Wells.pdf
    • http://loaminoo.linkpc.net/3098090097098092/Crusade-for-Justice-The-Autobiography-of-Ida-B-Wells-by-Ida-B-Wells-Barnett.pdf
    • http://loaminoo.linkpc.net/6095091098099098/The-Time-Machine-Herbert-George-Wells-by-H-G-Wells.pdf
    • http://loaminoo.linkpc.net/5095096090096097/La-Suisse-by-Daniel-Moreau.pdf
    • http://loaminoo.linkpc.net/5092095099093/Three-Wells-of-the-Sea-Three-Wells-of-the-Sea-1-by-Terry-Madden.pdf
    • http://loaminoo.linkpc.net/2095094098093093/Promise-of-Glory-A-Novel-of-Antietam-by-C-X-Moreau.pdf
    • http://loaminoo.linkpc.net/6090099096092090/Discoveries-Gustave-Moreau-by-Genevi-ve-Lacambre.pdf
    • http://loaminoo.linkpc.net/9092092090090096/The-Island-of-Doctor-Moreau-1000-Copy-Limited-Edition-by-H-G-

Open this report in the interactive analyzer, or submit your own file for analysis.