Malicious PDF — malware analysis report

Static analysis result for SHA-256 c2a99e620e7fd443…

MALICIOUS

PDF

24.9 KB Created: 2019-04-30 20:30:06 +01:00 Authoring application: mPDF 5.7
MD5: 0702f752e81dd7fdf708968954d4486e SHA-1: b39fe7844a0b138cea4c6ef39d7b0704f5f79b33 SHA-256: c2a99e620e7fd443d6dab148aa73bae80b69635cd03dcd57e467bfb068b2e966
90 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell

The PDF contains a large number of embedded links to external PDF files, a technique often used for SEO poisoning or to distribute malicious content. The ML classifier strongly indicated maliciousness. While no scripts were extracted, the heuristic 'PDF_SEO_LINK_FARM' and the sheer volume of links to the 'loaminoo.linkpc.net' domain suggest a coordinated effort to drive traffic to potentially compromised or malicious content. The document body was unreadable, preventing a more specific assessment of the lure.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9901

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/3099091096095098/Dragon-Knight-s-Shield-by-Mary-Morgan.pdf
    • http://loaminoo.linkpc.net/4098098096097091/The-Dragon-Knight-Dragon-Knight-2-by-Gordon-R-Dickson.pdf
    • http://loaminoo.linkpc.net/2091098093098092/The-Dragon-Knight-Dragon-Knight-2-by-Gordon-R-Dickson.pdf
    • http://loaminoo.linkpc.net/3096094095096094/Rocket-Girl-The-Story-of-Mary-Sherman-Morgan-America-s-First-Female-Rocket-Scientist-by-George-D-Morgan.pdf
    • http://loaminoo.linkpc.net/2099095092094094/Dragon-Outcast-Age-of-Fire-3-by-E-E-Knight.pdf
    • http://loaminoo.linkpc.net/2099095092094095/Dragon-Avenger-Age-of-Fire-2-by-E-E-Knight.pdf
    • http://loaminoo.linkpc.net/4093092097092/A-Dragon-s-Awakening-The-Chronicles-of-Kale-1-by-Aya-Knight.pdf
    • http://loaminoo.linkpc.net/1091091097097090099/Neon-Dragon-Knight-and-Devlin-1-by-John-F-Dobbyn.pdf
    • http://loaminoo.linkpc.net/3097094092096097/G-A-Aiken-Dragon-Bundle-The-Dragon-Who-Loved-Me-What-a-Dragon-Should-Know-Last-Dragon-Standing-amp-How-to-Drive-a-Dragon-Crazy-The-Dragon-Kin-3-6-by-G-A-Aiken.pdf
    • http://loaminoo.linkpc.net/4099093097095099/Dragon-Prince-Series-Including-Melanie-Rawn-Dragon-Prince-Sunrunner-s-Fire-the-Star-Scroll-Sunrunner-High-Prince-Stronghold-Novel-the-Dragon-Token-Skybowl-Dragon-Prince-and-Dragon-Star-Trilogies-Diarmadhi-Merida-Dragon-Prince-Isulk-im-by-Hephaestus-Books.pdf
    • http://loaminoo.linkpc.net/4092093091096091/Home-to-My-Father-A-Knight-s-Diary-by-Mary-C-Findley.pdf
    • http://loaminoo.linkpc.net/1090097095095090/Hope-and-the-Knight-of-the-Black-Lion-by-Mary-C-Findley.pdf
    • http://loaminoo.linkpc.net/3092094095092096/Hope-and-the-Knight-of-the-Black-Lion-by-Mary-C-Findley.pdf
    • http://loaminoo.linkpc.net/7094094093091096/Her-Prairie-Knight-Prairie-Brides-2-by-Kit-Morgan.pdf
    • http://loaminoo.linkpc.net/6092098097097099/Woman-and-the-Dragon-Apparitions-of-Mary-by-David-Michael-Lindsey.pdf
    • http://loaminoo.linkpc.net/1091091096099099092/Wikitroid---Federation-Solar-System-Bryyo-Elysia-Gfs-Olympus-Norion-quot-Jolly-Roger-quot-Drone-Aeromine-Alpha-Hopper-Anti-Air-Cannon-quot-Tiamat-quot-Atomic-Berserker-Knight-Blast-Shield-Bliptrans-Blue-Door-Bomb-Slot-Brinstone-Bryyonian-Bryyonian-Golem-by-Source-Wikipedia.pdf
    • http://loaminoo.linkpc.net/2093094098099091/Call-of-the-Dragon-a-Dragon-Fantasy-Adventure-Dragon-Riders-of-Elantia-Book-1-by-Jessica-Drake.pdf
    • http://loaminoo.linkpc.net/4092095099091094/Morgan-s-Return-Morgan-Selwood-2-by-Greta-van-der-Rol.pdf
    • http://loaminoo.linkpc.net/1090097097093094090/The-Women-of-Easter-Encounter-the-Savior-with-Mary-of-Bethany-Mary-of-Nazareth-and-Mary-Magdalene-by-Liz-Curtis-Higgs.pdf
    • http://loaminoo.linkpc.net/2094091097092093/Evie-s-Knight-The-Knight-Series-1-by-Kimberly-Krey.pdf
    • http://loaminoo.linkpc.net/3097094092096097/G-A-Aiken-Dragon-Bundle-The-Dragon-Who-Loved-Me-What-a-Dragon-Should-Know-Last-Dragon-Standing-amp-How-to-Drive-

Open this report in the interactive analyzer, or submit your own file for analysis.