Malicious PDF — malware analysis report

Static analysis result for SHA-256 c14f36e93dc927f4…

MALICIOUS

PDF

13.8 KB Created: 2019-05-01 17:59:06 +01:00 Authoring application: mPDF 5.7
MD5: e4f5b2a0fb71649471963c41812f02e6 SHA-1: 3dfefd4fc3d29258ac50be7057b25817d2d30d81 SHA-256: c14f36e93dc927f4e2db1f1daec66e1d21dd1fa8d3ecece60131f3482c8c1c7f
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious File

The PDF contains a large number of embedded links pointing to external PDF files, a technique often used for SEO poisoning or to distribute malicious content. The ML classifier strongly flagged this PDF as malicious. The primary attack pattern involves directing users to a domain hosting numerous book-themed PDF files, likely as a lure.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9891

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/3094092097098090/You-Don-t-Have-to-Say-You-Love-Me-by-Sarra-Manning.pdf
    • http://loaminoo.linkpc.net/4092098099091092/You-Don-t-Have-to-Say-You-Love-Me-by-Sarra-Manning.pdf
    • http://loaminoo.linkpc.net/6097099091092/Nobody-s-Girl-by-Sarra-Manning.pdf
    • http://loaminoo.linkpc.net/2091091093099099/Let-s-Get-Lost-by-Sarra-Manning.pdf
    • http://loaminoo.linkpc.net/8097090096097093/Im-Eifer-des-Gef-hls-by-Sarra-Manning.pdf
    • http://loaminoo.linkpc.net/7090094090093/Guitar-Girl-by-Sarra-Manning.pdf
    • http://loaminoo.linkpc.net/2097090091094096/The-House-of-Secrets-by-Sarra-Manning.pdf
    • http://loaminoo.linkpc.net/1099099090093099/Pretty-Things-by-Sarra-Manning.pdf
    • http://loaminoo.linkpc.net/4097095093099097/French-Kiss-Diary-Of-A-Crush-1-by-Sarra-Manning.pdf
    • http://loaminoo.linkpc.net/6094093096099/What-Happened-to-Alex-Manning-The-Manning-Family-Series-1-by-Kim-Scott.pdf
    • http://loaminoo.linkpc.net/3099099093092095/Smack-Dab-in-the-Middle-of-God-s-Love-by-Brennan-Manning.pdf
    • http://loaminoo.linkpc.net/8093090096092097/A-Life-with-No-Regrets-Fairhope-4-by-Sarra-Cannon.pdf
    • http://loaminoo.linkpc.net/2096097093097096/The-Trouble-with-Goodbye-Fairhope-1-by-Sarra-Cannon.pdf
    • http://loaminoo.linkpc.net/2098099097093090/Death-s-Awakening-Eternal-Sorrows-1-by-Sarra-Cannon.pdf
    • http://loaminoo.linkpc.net/4094091095097090/Emerald-Darkness-The-Shadow-Demons-Saga-7-by-Sarra-Cannon.pdf
    • http://loaminoo.linkpc.net/4094091097094098/A-Demon-s-Wrath-The-Shadow-Demons-Saga-6-1-by-Sarra-Cannon.pdf
    • http://loaminoo.linkpc.net/2095091095095091/The-Gone-and-the-Going-Away-by-Maurice-Manning.pdf
    • http://loaminoo.linkpc.net/1091096090090097096/The-Art-of-Thor-by-Matthew-K-Manning.pdf
    • http://loaminoo.linkpc.net/1096092092097094/The-Vril-Codex-by-Ben-Manning.pdf
    • http://loaminoo.linkpc.net/2094098091098094/Energize-by-Thomas-R-Manning.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.