Malicious PDF — malware analysis report

Static analysis result for SHA-256 c17bf457919aef7e…

MALICIOUS

PDF

14.3 KB Created: 2019-05-02 01:15:50 +01:00 Authoring application: mPDF 5.7
MD5: d89153aba10e874b164d7bafedd70223 SHA-1: 0d6f2a8084179b375048699e999232ad2101c110 SHA-256: c17bf457919aef7eb86a3efce356a605148ea7f5ee72d735368b7b18fcdab2fe
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF file contains a large number of embedded links pointing to external PDF files, primarily hosted on the 'loaminoo.linkpc.net' domain. This behavior is indicative of a link farm or a lure to download further malicious content. The ML classifier also flagged this PDF as malicious with high confidence.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9891

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/7091095096094/Black-Moon-Black-Moon-Saga-Book-1-by-F-M-Sherrill.pdf
    • http://loaminoo.linkpc.net/2098090096099097/Black-Moon-Silver-Moon-2-by-Rebecca-A-Rogers.pdf
    • http://loaminoo.linkpc.net/1092097096096092/Black-Moon-Silver-Moon-2-by-Rebecca-A-Rogers.pdf
    • http://loaminoo.linkpc.net/5090095095090098/Black-Dogs-Part-Two-The-Mountain-of-Iron-Black-Dogs-Book-2-by-Ursula-Vernon.pdf
    • http://loaminoo.linkpc.net/4090099093098099/The-Mountain-of-the-Moon-by-Jayanta-Sengupta.pdf
    • http://loaminoo.linkpc.net/2090097098098093/The-Moon-The-Madness-and-The-Magic-Enchanted-Mountain-2-by-Eliza-March.pdf
    • http://loaminoo.linkpc.net/4098090093092092/Over-the-Mountain-of-the-Moon-A-Tale-of-a-Samurai-Consort-by-Reiko-Morgan.pdf
    • http://loaminoo.linkpc.net/3090091096092097/Over-the-Mountain-of-the-Moon-A-Tale-of-a-Samurai-Consort-by-Reiko-Morgan.pdf
    • http://loaminoo.linkpc.net/3090090099093096/Over-the-Mountain-of-the-Moon-A-Tale-of-a-Samurai-Consort-by-Reiko-Morgan.pdf
    • http://loaminoo.linkpc.net/1091095098093092/Ghost-on-Black-Mountain-by-Ann-Hite.pdf
    • http://loaminoo.linkpc.net/3098092093091/Mountain-of-Black-Glass-Otherland-3-by-Tad-Williams.pdf
    • http://loaminoo.linkpc.net/9099090099093092/Black-Oak-Music-and-Tablature-for-the-Mountain-Dulcimer-by-David-S-Sharp.pdf
    • http://loaminoo.linkpc.net/2090097094095091/Beneath-the-Neon-Moon-by-Theda-Black.pdf
    • http://loaminoo.linkpc.net/5090091090098/The-Black-Moon-Poldark-5-by-Winston-Graham.pdf
    • http://loaminoo.linkpc.net/1093090093090096/Purity-Salem-Moon-2-by-Scarlet-Black.pdf
    • http://loaminoo.linkpc.net/2098095099099/Black-Moon-Draw-by-Lizzy-Ford.pdf
    • http://loaminoo.linkpc.net/4091093091095091/Children-of-the-Moon-by-Tristan-Black-Wolf.pdf
    • http://loaminoo.linkpc.net/1091096094095092094/The-Black-Sheep-North-Moon-Bay-1-by-Patricia-Ryan.pdf
    • http://loaminoo.linkpc.net/9096098091091099/Alpha-Takes-Beta-Red-Moon-Mates-2-by-Jacklyn-Black.pdf
    • http://loaminoo.linkpc.net/2094097099097097/Dark-Side-of-the-Moon-Laura-Cardinal-2-by-J-Carson-Black.pdf
    • http://loaminoo.linkpc.net/9099090099093092/Black-Oak-Music-and-Tablatu

Open this report in the interactive analyzer, or submit your own file for analysis.