Malicious PDF — malware analysis report

Static analysis result for SHA-256 c3cdf37ea51d850c…

MALICIOUS

PDF

16.2 KB Created: 2019-05-03 05:05:48 +01:00 Authoring application: mPDF 5.7
MD5: a57691700d6af570a9a31ce5b8e62b4b SHA-1: bb2382be2f398d087b57a6f90ca94b9267e8e5db SHA-256: c3cdf37ea51d850ca698c5f06178190838cdcd3b977abec975c2e835681a3aff
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF contains a large number of embedded external links, identified by the PDF_SEO_LINK_FARM heuristic. The ML classifier also flagged this PDF as malicious. While the URLs themselves are currently marked as benign, the sheer volume and structure suggest a malicious intent, likely for SEO poisoning or to distribute further malicious content. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9898

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/4096098090097091/The-Last-Kiss-by-M-R-Murphy.pdf
    • http://loaminoo.linkpc.net/1091098094097097090/Ruhe-in-Fetzen-Ein-Fall-f-r-Mrs-Murphy-Ein-Mrs--Murphy-Krimi-2-by-Rita-Mae-Brown.pdf
    • http://loaminoo.linkpc.net/1091098094098097092/Die-Katze-l-sst-das-Mausen-nicht-Ein-Fall-f-r-Mrs-Murphy-Ein-Mrs--Murphy-Krimi-10-by-Rita-Mae-Brown.pdf
    • http://loaminoo.linkpc.net/8097096094092094/Die-Katze-l-sst-das-Mausen-nicht-Maus-im-Aus-Ein-Fall-f-r-Mrs-Murphy-Catch-As-Cat-Can-Tail-Of-The-Tip-Off-Mrs-Murphy-10-11-by-Rita-Mae-Brown.pdf
    • http://loaminoo.linkpc.net/1091095098097096092/Murphy-und-das-Grauen-D-monenj-ger-Murphy-by-Earl-Warren.pdf
    • http://loaminoo.linkpc.net/2097092097095092/Murphy-s-Law-Molly-Murphy-1-by-Rhys-Bowen.pdf
    • http://loaminoo.linkpc.net/4098098093099097/Murphy-s-Law-Molly-Murphy-1-by-Rhys-Bowen.pdf
    • http://loaminoo.linkpc.net/1091095098096098098/Murphy-und-die-Templer-D-monenj-ger-Murphy-by-Ann-Murdoch.pdf
    • http://loaminoo.linkpc.net/9095097097091097/A-Kiss-Before-Lying-Last-Kiss-Series-Book-1-by-Bethany-Hensel.pdf
    • http://loaminoo.linkpc.net/2090096093091091/Kiss-Across-Kingdoms-Kiss-Across-Time-5-by-Tracy-Cooper-Posey.pdf
    • http://loaminoo.linkpc.net/2090096093091096/Kiss-Across-Swords-Kiss-Across-Time-2-by-Tracy-Cooper-Posey.pdf
    • http://loaminoo.linkpc.net/1090099099094093095/Mick-Murphy-s-Law-A-Mick-Murphy-Key-West-Mystery-by-Michael-Haskins.pdf
    • http://loaminoo.linkpc.net/5099094096092/Kiss-of-Night-Kiss-Trilogy-1-by-Debbie-Vigui-.pdf
    • http://loaminoo.linkpc.net/1090095097099093/Always-Kiss-Me-Goodnight-Guardian-Kiss-1-by-Megan-Gaudino.pdf
    • http://loaminoo.linkpc.net/4098092091094098/Second-Kiss-Second-Kiss-1-by-Natalie-Palmer.pdf
    • http://loaminoo.linkpc.net/8096092098096/If-We-Kiss-If-We-Kiss-1-by-Rachel-Vail.pdf
    • http://loaminoo.linkpc.net/2090091097094093/To-Kiss-a-Spy-Kiss-2-by-Jane-Feather.pdf
    • http://loaminoo.linkpc.net/3090096098099098/Kiss-Me-Kiss-of-Death-2-by-L-P-Lovell.pdf
    • http://loaminoo.linkpc.net/7090091097096/Itazura-Na-Kiss-Volume-1-Itazura-Na-Kiss-1-2-by-Kaoru-Tada.pdf
    • http://loaminoo.linkpc.net/2090093096097094/Itazura-Na-Kiss-Volume-5-Itazura-Na-Kiss-5-by-Kaoru-Tada.pdf
    • http://loaminoo.linkpc.net/9095097097091097/A-Kiss-Before-Lying-Last-Kiss-Series-Book-1-by-Bethany-Hense