Malicious PDF — malware analysis report

Static analysis result for SHA-256 d20ffa2999d6e0d3…

MALICIOUS

PDF

19.2 KB Created: 2019-04-30 02:48:13 +01:00 Authoring application: mPDF 5.7
MD5: f968db6001cf5e9d937dd60d3cfcd674 SHA-1: ff334060f1aa0980247366da85b265a9d70c6cea SHA-256: d20ffa2999d6e0d30d177d9e29d3cdc6fc5d4158af256f949313756e0b3fc16d
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1204.002 Malicious Link

The PDF contains a large number of embedded links to external websites, identified as a 'PDF_SEO_LINK_FARM'. While the document body is heavily obfuscated, the presence of numerous links suggests an attempt to direct users to potentially malicious or SEO-manipulated content. The ML classifier also flagged this PDF as malicious with high confidence.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9920

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/1090095093095091099/Life-on-the-Refrigerator-Door-by-Kuipers-Alice-Author-ON-Aug-01-2008-Paperback-by-Alice-Kuipers.pdf
    • http://loaminoo.linkpc.net/1092095097099095/Notes-from-an-American-Jail-One-attorney-s-60-days-in-the-New-Haven-County-Jail-by-Jean-Claude-Dehmel-II.pdf
    • http://loaminoo.linkpc.net/3096094093090097/Keys-City-of-Keys-Book-1-by-Amber-Kell.pdf
    • http://loaminoo.linkpc.net/1094094095098094/Lost-for-Words-by-Alice-Kuipers.pdf
    • http://loaminoo.linkpc.net/2098090096095099/Life-on-the-Refrigerator-Door-by-Alice-Kuipers.pdf
    • http://loaminoo.linkpc.net/1091091094097092092/Typologically-Salient-Features-of-Some-North-West-Caucasian-Languages-by-Aert-H-Kuipers.pdf
    • http://loaminoo.linkpc.net/1095096095090091/The-Keys-to-Paradise-Keys-to-Paradise-1-3-by-Robert-E-Vardeman.pdf
    • http://loaminoo.linkpc.net/1097094098099094/Brady-Remington-Landed-Me-in-Jail-by-Tijan.pdf
    • http://loaminoo.linkpc.net/7092095094091/Brady-Remington-Landed-Me-in-Jail-by-Tijan.pdf
    • http://loaminoo.linkpc.net/6091099097096/Digital-mind-jail-by-Gojim-Oavin.pdf
    • http://loaminoo.linkpc.net/4097093097095099/In-Jail-with-Nazim-Hikmet-by-Orhan-Kemal.pdf
    • http://loaminoo.linkpc.net/1090097092092094090/If-Stupid-was-Illegal-We-d-be-in-Jail-by-Brewer-Ryan.pdf
    • http://loaminoo.linkpc.net/5090090092092098/Mama-Went-to-Jail-for-the-Vote-by-Kathleen-Karr.pdf
    • http://loaminoo.linkpc.net/4093099093096/Letter-from-the-Birmingham-Jail-by-Martin-Luther-King-Jr-.pdf
    • http://loaminoo.linkpc.net/1091097091092092093/Jailhouse-Doc-A-Doctor-in-the-County-Jail-by-William-Wright.pdf
    • http://loaminoo.linkpc.net/1095096092096097/The-Women-Of-Block-12voices-From-A-Jail-Ministry-by-Linda-Pischke.pdf
    • http://loaminoo.linkpc.net/1090092097093090/The-Woman-Who-Wouldn-t-Talk-Why-I-Refused-to-Testify-Against-the-Clintons-and-What-I-Learned-in-Jail-by-Susan-McDougal.pdf
    • http://loaminoo.linkpc.net/5090097094098098/Lockdown-on-Rikers-Shocking-Stories-of-Abuse-and-Injustice-at-New-York-s-Notorious-Jail-by-Mary-E-Buser.pdf
    • http://loaminoo.linkpc.net/3091093098096099/The-Prison-Angel-Mother-Antonia-s-Journey-from-Beverly-Hills-to-a-Life-of-Service-in-a-Mexican-Jail-by-Mary-Jordan.pdf
    • http://loaminoo.linkpc.net/5091090099092090/Ra-lrsalinas-and-the-Jail-Machine-My-Weapon-Is-My-Pen-by-Ra-l-R-Salinas-ra-lrsalinas-.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.