Malicious PDF — malware analysis report

Static analysis result for SHA-256 c8413242804cbffd…

MALICIOUS

PDF

15.9 KB Created: 2019-05-04 13:41:13 +01:00 Authoring application: mPDF 5.7
MD5: b7ddd06182e00fc25022ae2a8dde0306 SHA-1: a983db624c87b45efbe3b2fdab82e0890232eb8c SHA-256: c8413242804cbffdcc6d2635b04984a4080bcf4e669951e7167f8c6862aecbac
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF file was flagged by a machine learning classifier as malicious. The critical heuristic 'PDF_SEO_LINK_FARM' indicates the presence of numerous external links, all pointing to the same domain 'loaminoo.linkpc.net' with book-related slugs. This suggests a link-farming or redirection tactic to distribute malicious content. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9892

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/8093092093094095/The-Bluebird-and-the-Devil-Thornfield-Book-1-by-Zac-Blue.pdf
    • http://loaminoo.linkpc.net/8093092093095094/Adventures-of-Bluebird-Bluebird-and-the-Frog-by-MR-Wayne-Thomas-Moore.pdf
    • http://loaminoo.linkpc.net/8093092093095099/Edmonds-Cookery-Book-by-Bluebird-Foods-Ltd-.pdf
    • http://loaminoo.linkpc.net/3095095099098098/Devil-s-in-the-Details-Devil-s-Book-1-by-Sydney-Gibson.pdf
    • http://loaminoo.linkpc.net/3091090093090098/At-Home-Between-the-Devil-and-the-Deep-Blue-Sky-by-KoKo-Nervelli.pdf
    • http://loaminoo.linkpc.net/2094090097099093/Devil-in-a-Blue-Dress-Easy-Rawlins-1-by-Walter-Mosley.pdf
    • http://loaminoo.linkpc.net/4098099091098097/Blue-Eyed-Devil-A-Road-Odyssey-Through-Islamic-America-by-Michael-Muhammad-Knight.pdf
    • http://loaminoo.linkpc.net/3090099091097096/The-Devil-s-Gate-The-Devil-s-Gate-Trilogy-Book-1-by-Rue-Volley.pdf
    • http://loaminoo.linkpc.net/3097091094098090/Blue-Bloods-Blue-Bloods-Series-Book-1-by-Melissa-de-la-Cruz.pdf
    • http://loaminoo.linkpc.net/2090090091095092/Between-the-Devil-and-the-Deep-Blue-Sea-Merchant-Seamen-Pirates-and-the-Anglo-American-Maritime-World-1700-1750-by-Marcus-Rediker.pdf
    • http://loaminoo.linkpc.net/8093092092098093/The-Bluebird-The-Seven-Kingdoms-9-by-Cordelia-Castel.pdf
    • http://loaminoo.linkpc.net/8093092092091096/Bluebird-s-Nest-by-Dorothea-DePrisco.pdf
    • http://loaminoo.linkpc.net/1091090099097096097/Devil-in-the-Details-Book-of-Lucifer-1-by-Cat-O-39-Nine.pdf
    • http://loaminoo.linkpc.net/8093092093093094/I-Heard-a-Bluebird-Sing-by-Aileen-Fisher.pdf
    • http://loaminoo.linkpc.net/3091094093096094/Bluebird-or-The-Invention-of-Happiness-by-Sheila-Kohler.pdf
    • http://loaminoo.linkpc.net/3097098096094097/The-Devil-amp-the-Falcon-Book-Two-Portals-by-T-S-Bond.pdf
    • http://loaminoo.linkpc.net/8093092092098098/The-Bluebird-Carries-The-Sky-On-His-Back-by-Henry-David-Thoreau.pdf
    • http://loaminoo.linkpc.net/1095098097090095/Bluebird-Women-and-the-New-Psychology-of-Happiness-by-Ariel-Gore.pdf
    • http://loaminoo.linkpc.net/8093092092097098/Bluebird-of-Brockport-A-Novel-of-the-Erie-Canal-by-Donna-Winters.pdf
    • http://loaminoo.linkpc.net/3094099095092098/The-Blue-Book-by-A-L-Kennedy.pdf
    • http://loaminoo.linkpc.net/2090090091095092/Between-the-Devil-and-the-Deep-Blue-Sea-Me

Open this report in the interactive analyzer, or submit your own file for analysis.