Malicious PDF — malware analysis report

Static analysis result for SHA-256 c354c16b875a32b2…

MALICIOUS

PDF

26.2 KB Created: 2019-04-30 04:07:44 +01:00 Authoring application: mPDF 5.7
MD5: d47f112630c9b75df898a4ad9fe17e94 SHA-1: 3be7a55bf4988630aca8ffb0854cabc42cf413b9 SHA-256: c354c16b875a32b2b7b2bf98b79c87202b3fe5ce27417dbb22c2faa96250064c
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF document was flagged by a machine learning classifier as malicious. Static analysis revealed a large number of embedded external links, characteristic of a link farm. The document body contains numerous URLs pointing to what appear to be book-related PDFs, likely serving as a lure to direct users to these external sites. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9912

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/9095091099095090/Goethe-s-Go-Tz-Von-Berlichingen-Mit-Der-Eisernen-Hand-Ein-Schauspiel-by-Frank-Goodrich.pdf
    • http://loaminoo.linkpc.net/9095091099099095/Goethes-G-tz-Von-Berlichingen-Mit-Der-Eisernen-Hand-Ein-Schauspiel-Edited-with-Introduction-Notes-and-Map-by-Johann-Wolfgang-von-Goethe.pdf
    • http://loaminoo.linkpc.net/9095091097095094/Goetz-Von-Berlichingen-with-the-Iron-Hand-A-Drama-in-Five-Acts-by-Johann-Wolfgang-von-Goethe.pdf
    • http://loaminoo.linkpc.net/8096097097091094/Dramatic-Works-of-Goethe-Comprising-Faust-Iphigenia-in-Tauris-Torquato-Tasso-Egmont-and-Goetz-von-Berlichingen-by-Johann-Wolfgang-von-Goethe.pdf
    • http://loaminoo.linkpc.net/9094092092096099/Goetz-Von-Berlichingen-by-Johann-Wolfgang-von-Goethe.pdf
    • http://loaminoo.linkpc.net/9095091099099091/Goethes-S-mtliche-Werke-Vol-14-of-36-G-tz-Von-Berlichingen-Die-Mitschuldigen-Theater-Und-Dramatische-Poesie-by-Johann-Wolfgang-von-Goethe.pdf
    • http://loaminoo.linkpc.net/1090099095094095096/Der-Ritter-Mit-Der-Eisernen-Hand---Zur-Wiederbelebung-Der-Demokratie-by-Harald-Kiefer.pdf
    • http://loaminoo.linkpc.net/2093092090098/The-Diary-of-Anne-Frank-And-Related-Readings-by-Frances-Goodrich.pdf
    • http://loaminoo.linkpc.net/5097092091094091/Faust-A-Tragedy-By-Johann-Wolfgang-Von-Goethe-Translated-in-the-Original-Metres-by-Frank-Claudy-by-Johann-Wolfgang-von-Goethe.pdf
    • http://loaminoo.linkpc.net/1091091095092093095/Kaiser-Und-Galilaer-Ein-Weltgeschichtliches-Schauspiel-in-2-Theilen-1-Theil-Caesars-Abfall-Schauspiel-in-5-Akten-2-Theil-Kaiser-Julian-Schauspiel-in-5-Akten-by-Henrik-Ibsen.pdf
    • http://loaminoo.linkpc.net/1091095094093098095/Der-Briefwechsel-Zwischen-Goethe-Und-Zelter-Vol-1-of-4-Im-Auftrag-Des-Goethe-Und-Schiller-Archivs-Nach-Den-Handschriften-1799-1818-by-Johann-Wolfgang-von-Goethe.pdf
    • http://loaminoo.linkpc.net/5098095099094/Lend-a-Hand-Poems-about-Giving-by-John-Frank.pdf
    • http://loaminoo.linkpc.net/6093095095096095/The-Faust-of-Goethe-In-English-Verse-Part-1-by-Johann-Wolfgang-von-Goethe.pdf
    • http://loaminoo.linkpc.net/7095094090096093/Correspondence-Between-Goethe-And-Schiller-1794-1805-by-Johann-Wolfgang-von-Goethe.pdf
    • http://loaminoo.linkpc.net/7095099093092093/Briefe-an-Goethe-Erganzungsband-Zu-Den-Banden-1-5-by-Klassik-Stiftung-Weimar-Goethe-Schiller-Archiv.pdf
    • http://loaminoo.linkpc.net/9098092097099096/Zwei-Seelen-Ach-In-Meiner-Brust-Goethe-Ganz-Privat-by-Johann-Wolfgang-von-Goethe.pdf
    • http://loaminoo.linkpc.net/8098098095099092/Goethe-s-Faust-First-Part-of-the-Tragedy-with-55-illustrations-by-famous-artists-of-the-19th-century-by-Johann-Wolfgang-von-Goethe.pdf
    • http://loaminoo.linkpc.net/1091095096094095099/Goethe-s-Berte-by-Johann-Wolfgang-von-Goethe.pdf
    • http://loaminoo.linkpc.net/1091094091092095099/Articles-on-Plays-by-Johann-Wolfgang-Von-Goethe-Including-Faust-Mephistopheles-Erdgeist-Symphony-No-8-Mahler-La-Damnation-de-Faust-Goethe-s-by-Hephaestus-Books.pdf
    • http://loaminoo.linkpc.net/5090091099092099/A-Creature-Was-Stirring-by-Carter-Goodrich.pdf
    • http://loaminoo.linkpc.net/9095091099099091/Goethes-S-mtliche-Werke-Vol-14-o

Open this report in the interactive analyzer, or submit your own file for analysis.