Malicious PDF — malware analysis report

Static analysis result for SHA-256 cecfe6af8e2ef904…

MALICIOUS

PDF

21.1 KB Created: 2019-05-02 05:55:21 +01:00 Authoring application: mPDF 5.7
MD5: 198c7e7dcbf8026f2420d68e97f4db22 SHA-1: 2de2febdb4b51c87120d3bb0d70bf2a9d5d1620e SHA-256: cecfe6af8e2ef9046be9ad8c9c20ae6c39762b0be6a71678393ff2f1e71b175d
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF file contains a large number of embedded URLs, identified by the PDF_SEO_LINK_FARM heuristic. While many of these URLs themselves are classified as benign, the sheer volume and the nature of the heuristic suggest a malicious intent, possibly for SEO manipulation or to distribute further malicious content. The ML_NYX_PDF_MALICIOUS classifier also strongly indicates maliciousness. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9900

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/4097090092090/The-Strategic-ETF-Investor-How-to-Make-Money-with-Exchange-Traded-Funds-by-Scott-P-Frush.pdf
    • http://loaminoo.linkpc.net/9095095096097093/The-Investor-s-Dilemma-How-Mutual-Funds-Are-Betraying-Your-Trust-and-What-to-Do-about-It-by-Louis-Lowenstein.pdf
    • http://loaminoo.linkpc.net/2095094096094094/Make-Money-Online-How-I-Make-1700-A-Month-Plus-40-Ways-to-Make-Money-Online-by-Stacey-Davidson.pdf
    • http://loaminoo.linkpc.net/7093098091090091/HARD-MONEY-SUCCESS-FORMULA-The-18-Critical-Must-Ask-Questions-For-Hard-Money-Lenders-That-Will-Guarantee-Funds-For-Your-Real-Estate-Deals-Every-Single-Time-by-Sandy-Cesaire.pdf
    • http://loaminoo.linkpc.net/1090096096093092092/Clever-Investor-No-Money-Down-Real-Estate-Investing-Guide-by-Cody-Sperber.pdf
    • http://loaminoo.linkpc.net/2093092092097096/Economy-and-Nature-in-the-Fourteenth-Century-Money-Market-Exchange-and-the-Emergence-of-Scientific-Thought-by-Joel-Kaye.pdf
    • http://loaminoo.linkpc.net/8093098090096096/5-Tips-to-Help-You-Make-Money-on-Facebook-by-Bri.pdf
    • http://loaminoo.linkpc.net/1099097091097091/Saying-NO-5-Customers-You-Need-to-AVOID-to-Make-More-Money-by-Wuyen-Hsu.pdf
    • http://loaminoo.linkpc.net/4093095090096092/Ways-to-Make-Money-by-Youtube-by-K-E-Gaston.pdf
    • http://loaminoo.linkpc.net/8093098090097098/How-to-Sell-on-Etsy-and-Make-Money-Online-by-Bri.pdf
    • http://loaminoo.linkpc.net/9095097093091093/Make-Money-from-Decoupage-by-Virinia-Downham.pdf
    • http://loaminoo.linkpc.net/1091098095095097097/The-Rules-of-Money-How-to-Make-It-and-How-to-Hold-on-to-It-by-Richard-Templar.pdf
    • http://loaminoo.linkpc.net/1091094096091096090/How-to-Make-Money-Shooting-Stock-Footage-by-James-Orlowski.pdf
    • http://loaminoo.linkpc.net/8092091091094092/It-s-TIME-to-Make-MORE-Money-with-Watch-Repairs-by-Sheila-Gendron.pdf
    • http://loaminoo.linkpc.net/1091094098099099094/All-the-Tea-in-China-How-to-Buy-Sell-and-Make-Money-on-the-Mainland-by-Jeremy-Haft.pdf
    • http://loaminoo.linkpc.net/8092094094095092/App-Empire-Make-Money-Have-a-Life-and-Let-Technology-Work-for-You-by-Chad-Mureta.pdf
    • http://loaminoo.linkpc.net/3096099097098092/How-to-Make-Money-Writing-Quick-Non-Fiction-eBooks-Guaranteed-by-Ellen-Violette.pdf
    • http://loaminoo.linkpc.net/1091092090099091099/How-to-Make-Money-in-Stocks-A-Winning-System-in-Good-Times-or-Bad-by-William-J-O-39-Neil.pdf
    • http://loaminoo.linkpc.net/1099097091095099/Get-Busy-Make-Money-Putting-Technology-amp-Innovation-To-Work-For-You-by-Ian-Seamus-Finn.pdf
    • http://loaminoo.linkpc.net/6095098090093092/The-Million-Dollar-One-Person-Business-Make-Great-Money-Work-the-Way-You-Like-Have-the-Life-You-Want-by-Elaine-Pofeldt.pdf
    • http://loaminoo.linkpc.net/7093098091090091/HARD-MONEY-SUCCESS-FORMULA-The-18-Critical-Must-Ask-Questions-For-Hard-Money-Lenders-That-Will-Guarantee-Funds-For-Your-Real-Estate-Deals-Every-Single-Time-by-Sandy-Cesair

Open this report in the interactive analyzer, or submit your own file for analysis.