Malicious PDF — malware analysis report

Static analysis result for SHA-256 c85457b1d26dc408…

MALICIOUS

PDF

17.4 KB Created: 2019-04-30 11:19:47 +01:00 Authoring application: mPDF 5.7 First seen: 2021-04-01
MD5: c51e909ee3619c0f74c01a9738987a87 SHA-1: f93d362e0ad1f5db750accdb996e8691edc8ded4 SHA-256: c85457b1d26dc408a8f034a55447d663bfae565ddd9b7f419d1f077dbad70b7d
92 Risk Score

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/2094090090095099/Thief-Trap-Cloak-Games-1-by-Jonathan-Moeller.pdf In PDF document text
    • http://loaminoo.linkpc.net/2094090090096096/Blood-Cast-Cloak-Games-9-by-Jonathan-Moeller.pdfIn PDF document text
    • http://loaminoo.linkpc.net/4094099090097098/Shatter-Stone-Cloak-Games-5-by-Jonathan-Moeller.pdfIn PDF document text
    • http://loaminoo.linkpc.net/2094090090095097/Frost-Fever-Cloak-Games-2-by-Jonathan-Moeller.pdfIn PDF document text
    • http://loaminoo.linkpc.net/4094099090097097/Wraith-Wolf-Cloak-Games-3-5-by-Jonathan-Moeller.pdfIn PDF document text
    • http://loaminoo.linkpc.net/4094097092099099/The-Eightfold-Knife-Frostborn-2-by-Jonathan-Moeller.pdfIn PDF document text
    • http://loaminoo.linkpc.net/2094090090097090/Ghost-in-the-Blood-The-Ghosts-3-by-Jonathan-Moeller.pdfIn PDF document text
    • http://loaminoo.linkpc.net/2094090090096098/Child-of-the-Ghosts-Ghost-1-by-Jonathan-Moeller.pdfIn PDF document text
    • http://loaminoo.linkpc.net/4094097093090091/The-Undying-Wizard-Frostborn-3-by-Jonathan-Moeller.pdfIn PDF document text
    • http://loaminoo.linkpc.net/1095096095094099/Child-of-the-Ghosts-Ghosts-1-by-Jonathan-Moeller.pdfIn PDF document text
    • http://loaminoo.linkpc.net/2094090090090093/Demonsouled-Demonsouled-1-by-Jonathan-Moeller.pdfIn PDF document text
    • http://loaminoo.linkpc.net/3091096099093090/The-Wedding-Trap-The-Trap-Trilogy-3-by-Tracy-Anne-Warren.pdfIn PDF document text
    • http://loaminoo.linkpc.net/3092098092097092/How-To-Trap-a-Cougar-Vs-How-To-Trap-a-Cub-by-Ben-Peller.pdfIn PDF document text
    • http://loaminoo.linkpc.net/5095095092095093/Hunger-Games-A-Detailed-Summary-of-Hunger-Games-Book-1----Along-With-Analysis-And-Fun-Quizes-Hunger-Games-Hunger-Games-Trilogy-Hunger-by-Mr-Summary.pdfIn PDF document text
    • http://loaminoo.linkpc.net/3093092097090090/The-Pot-Thief-Who-Studied-Georgia-O-Keeffe-The-Pot-Thief-Mysteries-Book-7-by-J-Michael-Orenduff.pdfIn PDF document text
    • http://loaminoo.linkpc.net/3096097096098094/The-Pot-Thief-Who-Studied-Pythagoras-A-Pot-Thief-Murder-Mystery-1-by-J-Michael-Orenduff.pdfIn PDF document text
    • http://loaminoo.linkpc.net/7090090093091099/The-Pot-Thief-Who-Studied-Escoffier-A-Pot-Thief-Murder-Mystery-3-by-J-Michael-Orenduff.pdfIn PDF document text
    • http://loaminoo.linkpc.net/6092094096097092/The-Thief-Sang-Pencuri-dari-Eddis-The-Queen-s-Thief-1-by-Megan-Whalen-Turner.pdfIn PDF document text
    • http://loaminoo.linkpc.net/2091098091090092/The-Thief-The-Queen-s-Thief-1-by-Megan-Whalen-Turner.pdfIn PDF document text
    • http://loaminoo.linkpc.net/5095095093093094/Sleepover-Unofficial-Jennifer-Lawrence-Trivia-Games-What-is-your-Hunger-Games-IQ-Book-1-by-A-M-Rice.pdfIn PDF document text