Malicious PDF — malware analysis report

Static analysis result for SHA-256 c2ad6147954a2b71…

MALICIOUS

PDF

37.0 KB Created: 2019-04-30 04:02:13 +01:00 Authoring application: mPDF 5.7
MD5: cc6c93ce883c34e17e183e055e991c2b SHA-1: 4ced34431f011969a0195ec17749080d432e5afc SHA-256: c2ad6147954a2b719c1ba17af600425e47b15cbd20bef19aa3dc50c0197d545e
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF contains a large number of embedded URLs, identified by the PDF_SEO_LINK_FARM heuristic, which are designed to direct users to external websites. While the document body text is heavily obfuscated, the presence of numerous links suggests a tactic to drive traffic to potentially malicious sites. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9894

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/8096093094091098/Libba-Bray-Books-Checklist-Reading-Order-of-Gemma-Doyle-Series-The-Diviners-Series-and-List-of-All-Libba-Bray-Books-by-Kevin-Hanson.pdf
    • http://loaminoo.linkpc.net/8096093093098097/Novels-by-Libba-Bray-List-of-Gemma-Doyle-Trilogy-Characters-by-Books-LLC.pdf
    • http://loaminoo.linkpc.net/1090091098096097094/Ben-Aaronovitch-Books-Checklist-Reading-Order-of-Doctor-Who-Series-PC-Peter-Grant-Series-and-List-of-All-Ben-Aaronovitch-Books-by-Kevin-Hanson.pdf
    • http://loaminoo.linkpc.net/1091097094090094093/Karen-Rose-Books-2017-Checklist-Reading-Order-of-Baltimore-Series-Chicago-Series-Cincinnati-Series-Daniel-Vartanian-Series-Romantic-Suspense-Series-and-List-of-All-Karen-Rose-Books-by-Series-List.pdf
    • http://loaminoo.linkpc.net/8092098092098093/Guy-Gavriel-Kay-Books-2017-Checklist-Reading-Order-of-Fionavar-Tapestry-Series-Sarantine-Mosaic-Series-Under-Heaven-Series-and-List-of-All-Guy-Gavriel-Kay-Books-by-Sorted-List.pdf
    • http://loaminoo.linkpc.net/7090093094099098/Deanna-Raybourn-Books-2017-Checklist-Reading-Order-of-A-Spear-of-Summer-Grass-Series-City-of-Jasmine-Series-Lady-Julia-Grey-Series-Veronica-Speedwell-Series-and-List-of-All-Deanna-Raybourn-Books-by-Platinum-List.pdf
    • http://loaminoo.linkpc.net/7091096092099096/Maya-Banks-Series-Reading-Order-amp-Checklist-Series-List-in-Order---KGI-Series-Enforcers-Series-Slow-Burn-Series-amp-All-Other-Books-Listabook-Series-Order-Book-58-by-Listabook.pdf
    • http://loaminoo.linkpc.net/5094094098094097/Brandon-Mull-Books-Checklist-and-Series-in-Order-2017-Beyonders-Series-in-Order-Candy-Shop-War-Series-in-Order-Dragonwatch-Series-in-Order-Fablehaven-Series-Five-Kingdoms-Series-and-More-by-List-To-Read.pdf
    • http://loaminoo.linkpc.net/8090099096090099/Reed-Farrel-Coleman-Books-2017-Checklist-Reading-Order-of-Coleman-s-Jesse-Stone-Series-Gus-Murphy-Series-Joe-Serpe-Series-Moe-Prager-Series-and-List-of-All-Reed-Farrel-Coleman-Books-by-Series-Order.pdf
    • http://loaminoo.linkpc.net/5098095090096095/Fred-Vargas-Books-2017-Checklist-Reading-Order-of-Commissaire-Adamsberg-Series-Three-Evangelists-Series-and-List-of-All-Fred-Vargas-Books-by-Platinum-List.pdf
    • http://loaminoo.linkpc.net/3092095090095/A-Great-and-Terrible-Beauty-Gemma-Doyle-1-by-Libba-Bray.pdf
    • http://loaminoo.linkpc.net/2096094094099097/A-Great-and-Terrible-Beauty-Gemma-Doyle-1-by-Libba-Bray.pdf
    • http://loaminoo.linkpc.net/8096094093092091/Coreene-Callahan-Books-2017-Checklist-Reading-Order-of-Circle-of-Seven-Series-Dragonfury-Series-and-List-of-All-Coreene-Callahan-Books-by-Diamond-List.pdf
    • http://loaminoo.linkpc.net/9092099096090094/Haruki-Murakami-Books-2017-Checklist-Reading-Order-of-1Q84-Series-Rat-Series-and-List-of-All-Haruki-Murakami-Books-by-Series-Order.pdf
    • http://loaminoo.linkpc.net/1091096093096096096/Liza-Marklund-Books-2017-Checklist-Reading-Order-of-Annika-Bengtzon-Series-and-List-of-All-Liza-Marklund-Books-by-Series-List.pdf
    • http://loaminoo.linkpc.net/9099093092094091/Ann-Leckie-Books-2017-Checklist-Reading-Order-of-Imperial-Radch-Series-and-List-of-All-Ann-Leckie-Books-by-List-Fun.pdf
    • http://loaminoo.linkpc.net/1090092098094095098/Raymond-Khoury-Books-2017-Checklist-Reading-Order-of-Templar-Series-and-List-of-All-Raymond-Khoury-Books-by-Series-List.pdf
    • http://loaminoo.linkpc.net/5093099096090095/Stieg-Larsson-Books-2017-Checklist-Reading-Order-of-Millennium-Series-and-List-of-All-Stieg-Larsson-Books-by-Series-List.pdf
    • http://loaminoo.linkpc.net/6091095090096095/Carlos-Ruiz-Zafon-Books-2017-Checklist-Reading-Order-of-Cemetery-Of-Forgotten-Series-Niebla-Series-and-List-of-All-Carlos-Ruiz-Zafon-Books-by-Platinum-List.pdf
    • http://loaminoo.linkpc.net/8096093093097098/The-Gemma-Doyle-Trilogy-Gemma-Doyle-1-3-by-Libba-Bray.pdf
    • http://loaminoo.linkpc.net/1091097094090094093/Karen-Rose-Books-2017-Checklist-Reading-Order-of-Baltimore-Series-Chicago-Series-Cincinnati-Series-Daniel-Vartanian-Serie

Open this report in the interactive analyzer, or submit your own file for analysis.