Malicious PDF — malware analysis report

Static analysis result for SHA-256 cab72cd2403ad90d…

MALICIOUS

PDF

18.8 KB Created: 2019-05-04 13:12:50 +01:00 Authoring application: mPDF 5.7 First seen: 2022-07-02
MD5: b3d971302af65984a2ee6cfb6da22bfe SHA-1: a09850e21c498b0a304a4c9f19ffe2aae5e54703 SHA-256: cab72cd2403ad90d9c077c9030572889e313587958408ca831d4de369b5856d9
92 Risk Score

Machine Learning

  • Nyx PDF Classifier malicious score 0.9912

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/6097099098098095/Silver-Blaze-Die-Memoiren-von-Sherlock-Holmes-by-Arthur-Conan-Doyle.pdf In PDF document text
    • http://loaminoo.linkpc.net/9096090098091090/Die-Memoiren-des-Sherlock-Holmes-11-Geschichten-by-Arthur-Conan-Doyle.pdfIn PDF document text
    • http://loaminoo.linkpc.net/8094098092093096/The-Sherlock-Holmes-Illustrated-Omnibus-The-Adventures-of-Sherlock-Holmes-the-Memoirs-of-Sherlock-Holmes-the-Hound-of-the-Baskervilles-the-Return-of-Sherlock-Holmes-A-Facsimile-of-the-by-Arthur-Conan-Doyle.pdfIn PDF document text
    • http://loaminoo.linkpc.net/9096097099094092/Arthur-Conan-Doyle-Sherlock-Holmes---Die-Romane-Eine-Studie-in-Scharlachrot---Das-Zeichen-der-Vier---Der-Hund-der-Baskervilles---Das-Tal-des-Grauens-by-Arthur-Conan-Doyle.pdfIn PDF document text
    • http://loaminoo.linkpc.net/8098099093093095/Die-Abenteuer-des-Sherlock-Holmes-Sherlock-Holmes-Ausgabe-Band-1-by-Arthur-Conan-Doyle.pdfIn PDF document text
    • http://loaminoo.linkpc.net/2091095090099093/The-Case-Book-of-Sherlock-Holmes-Sherlock-Holmes-9-by-Arthur-Conan-Doyle.pdfIn PDF document text
    • http://loaminoo.linkpc.net/1090093098095092/The-Original-Illustrated-Sherlock-Holmes-Sherlock-Holmes-3-6-by-Arthur-Conan-Doyle.pdfIn PDF document text
    • http://loaminoo.linkpc.net/8090093098092091/The-Sherlock-Holmes-Collection-by-Arthur-Conan-Doyle-by-Arthur-Conan-Doyle.pdfIn PDF document text
    • http://loaminoo.linkpc.net/3094092091093/The-Memoirs-of-Sherlock-Holmes-Sherlock-Holmes-4-by-Arthur-Conan-Doyle.pdfIn PDF document text
    • http://loaminoo.linkpc.net/3095098093096/The-Return-of-Sherlock-Holmes-Sherlock-Holmes-6-by-Arthur-Conan-Doyle.pdfIn PDF document text
    • http://loaminoo.linkpc.net/6091099091097092/The-Adventures-of-Sherlock-Holmes-Sherlock-Holmes-3-by-Arthur-Conan-Doyle.pdfIn PDF document text
    • http://loaminoo.linkpc.net/3092090090091091/The-Adventures-of-Sherlock-Holmes-Sherlock-Holmes-3-by-Arthur-Conan-Doyle.pdfIn PDF document text
    • http://loaminoo.linkpc.net/2095097092094093/Sherlock-The-Memoirs-of-Sherlock-Holmes-by-Arthur-Conan-Doyle.pdfIn PDF document text
    • http://loaminoo.linkpc.net/4095093095097094/Sherlock-Holmes-Sherlock-Holmes-1-by-Arthur-Conan-Doyle.pdfIn PDF document text
    • http://loaminoo.linkpc.net/1091092099097095095/Sherlock-Holmes-by-Arthur-Conan-Doyle.pdfIn PDF document text
    • http://loaminoo.linkpc.net/2096097091098093/Memoirs-of-Sherlock-Holmes-by-Arthur-Conan-Doyle.pdfIn PDF document text
    • http://loaminoo.linkpc.net/7093090092090097/His-Last-Bow---The-War-Service-of-Sherlock-Holmes-by-Arthur-Conan-Doyle.pdfIn PDF document text
    • http://loaminoo.linkpc.net/6099099098094095/His-Last-Bow-Some-Reminiscences-of-Sherlock-Holmes-by-Arthur-Conan-Doyle.pdfIn PDF document text
    • http://loaminoo.linkpc.net/3094093095098096/The-Adventures-of-Sherlock-Holmes-by-Arthur-Conan-Doyle.pdfIn PDF document text
    • http://loaminoo.linkpc.net/1090094094097094/The-Memoirs-of-Sherlock-Holmes-by-Arthur-Conan-Doyle.pdfIn PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.