Malicious PDF — malware analysis report

Static analysis result for SHA-256 d26bcf2e735bf1eb…

MALICIOUS

PDF

22.6 KB Created: 2019-05-01 18:32:23 +01:00 Authoring application: mPDF 5.7
MD5: ebd449f38464763a009c26f8c71ad2d7 SHA-1: 22b358004f62e03d859e212da4a3dbdf3fa9b040 SHA-256: d26bcf2e735bf1eb097894c9409d1191784bcbace40c790b49c9779b08bdd021
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF was flagged by a critical heuristic for containing a mass external link farm, with 26 links pointing to external PDFs. While the document body is heavily obfuscated, the presence of numerous links suggests a malicious intent, possibly for SEO manipulation or to redirect users to phishing or malware distribution sites. The ML classifier also strongly indicated maliciousness.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/8095095098091091/The-Titanic-An-Interactive-History-Adventure-by-Bob-Temple.pdf
    • http://loaminoo.linkpc.net/1091094096099092092/Westward-Expansion-An-Interactive-History-Adventure-by-Allison-Lassieur.pdf
    • http://loaminoo.linkpc.net/9092099099092098/The-Japanese-American-Internment-An-Interactive-History-Adventure-by-Rachael-Hanel.pdf
    • http://loaminoo.linkpc.net/9092099099093092/Mexican-Immigrants-in-America-an-Interactive-History-Adventure-by-Rachael-Hanel.pdf
    • http://loaminoo.linkpc.net/5090094095097090/HIDDEN-MICKEY-ADVENTURES-in-Disney-California-Adventure-by-Nancy-Temple-Rodrigue.pdf
    • http://loaminoo.linkpc.net/1091092099094096095/History-of-Dance-An-Interactive-Arts-Approach-by-Gayle-Kassing.pdf
    • http://loaminoo.linkpc.net/1096091098090090/Titanic-Survivor-The-Newly-Discovered-Memoirs-of-Violet-Jessop-Who-Survived-Both-the-Titanic-and-Britannic-Disasters-by-Violet-Jessop.pdf
    • http://loaminoo.linkpc.net/3098090095091092/Become-the-Woman-of-Your-Dreams-Interactive-Gender-Transformation-Feminization-Erotica-Aurora-Sparks-Interactive-Erotica-1-by-Aurora-Sparks.pdf
    • http://loaminoo.linkpc.net/3099090096090/She-A-History-of-Adventure-She-1-by-H-Rider-Haggard.pdf
    • http://loaminoo.linkpc.net/9099097097091099/She-A-History-of-Adventure-by-H-Rider-Haggard.pdf
    • http://loaminoo.linkpc.net/4097098097090091/In-Search-of-History-A-Personal-Adventure-by-Theodore-H-White.pdf
    • http://loaminoo.linkpc.net/2098097090090091/Pathfinder-Adventure-Path-10-A-History-of-Ashes-by-Michael-Kortes.pdf
    • http://loaminoo.linkpc.net/2095095094096090/Civil-War-Adventure-2-Real-History-More-Stories-of-the-War-That-Divided-America-by-Chuck-Dixon.pdf
    • http://loaminoo.linkpc.net/1099095094090094/The-Temple-of-Doubt-The-Temple-of-Doubt-1-by-Anne-Boles-Levy.pdf
    • http://loaminoo.linkpc.net/1090096099097094092/Tamora-Pierce---Alanna-The-First-Adventure-Characters-in-Alanna-The-First-Adventure-Places-in-Alanna-The-First-Adventure-Convent-Court-of-the-Rogue-Great-Mother-Goddess-Sponsor-Sweating-Sickness-Training-Master-Trebond-Ysandir-Alanna-of-P-by-Source-Wikipedia.pdf
    • http://loaminoo.linkpc.net/5093093094094096/The-Temple-of-the-Blind-The-Temple-of-the-Blind-3-by-Brian-Harmon.pdf
    • http://loaminoo.linkpc.net/6098092092096098/THE-BEST-HISTORY-4-in-1-HISTORY-OF-ASIA-HISTORY-OF-chaina-HISTORY-OF-COMMUNISM-HISTORY-OF-ENGLAND-by-Good-thailand.pdf
    • http://loaminoo.linkpc.net/2099093095097090/Let-The-Adventure-Begin-The-Awesome-Adventure-of-Xiapo-Yellip-Zump-1-by-Jacob-Spire.pdf
    • http://loaminoo.linkpc.net/1090093098098092099/Statue-of-Liberty-Adventure-Choose-Your-Own-Adventure-58-by-Ellen-Kushner.pdf
    • http://loaminoo.linkpc.net/2093095092097094/The-Ship-of-Adventure-Adventure-6-by-Enid-Blyton.pdf
    • http://loaminoo.linkpc.net/1096091098090090/Titanic-Survivor-The-

Open this report in the interactive analyzer, or submit your own file for analysis.