Malicious PDF — malware analysis report

Static analysis result for SHA-256 d339798c191285b3…

MALICIOUS

PDF

19.2 KB Created: 2019-05-02 01:53:44 +01:00 Authoring application: mPDF 5.7
MD5: fc88117426b2913189c8e1b7a992e14d SHA-1: bc2bcc4990140b063e8e8a828a2011b0b24f3865 SHA-256: d339798c191285b3daa7a34d817f3ce32aeeace4a6be664261b15a050eae75af
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF contains a large number of embedded links, identified by the PDF_SEO_LINK_FARM heuristic, directing users to various external websites. The ML classifier also strongly indicated maliciousness. The embedded URLs are likely part of a link farm designed to drive traffic or potentially host further malicious content.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9920

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/2095097098090092/The-Secret-World-Of-The-Irish-Male-by-Joseph-O-39-Connor.pdf
    • http://loaminoo.linkpc.net/4096090097093098/Murder-at-an-Irish-Wedding-Irish-Village-Mystery-2-by-Carlene-O-39-Connor.pdf
    • http://loaminoo.linkpc.net/3098095090097090/The-Salesman-by-Joseph-O-39-Connor.pdf
    • http://loaminoo.linkpc.net/1096092090092099/The-Thrill-of-It-All-by-Joseph-O-39-Connor.pdf
    • http://loaminoo.linkpc.net/6093097094098097/The-Secret-Sharer-Le-Compagnon-Secret-by-Joseph-Conrad.pdf
    • http://loaminoo.linkpc.net/6096099097092090/Remember-Fontenoy-The-69th-New-York-and-the-Irish-Brigade-in-the-Civil-War-by-Joseph-G-Bilby.pdf
    • http://loaminoo.linkpc.net/5093095099094096/Nancy-Clancy-Secret-Admirer-by-Jane-O-39-Connor.pdf
    • http://loaminoo.linkpc.net/1093092097094/The-Fantastic-Secret-of-Owen-Jester-by-Barbara-O-39-Connor.pdf
    • http://loaminoo.linkpc.net/8096097093094091/Fantasies-of-Cross-Dressing-Japanese-Women-Write-Male-Male-Erotica-by-Kazumi-Nagaike.pdf
    • http://loaminoo.linkpc.net/2099095096099095/Threesomes-Male-Female-Male-by-Darren-G-Burton.pdf
    • http://loaminoo.linkpc.net/1091091097097096090/Poems-of-the-Irish-Revolutionary-Brotherhood-Thomas-MacDonagh-P-H-Pearse-Joseph-Mary-Plunkett-Sir-Roger-Casement-1916-by-Padraic-Colum.pdf
    • http://loaminoo.linkpc.net/2096090094090094/So-Much-Owed-An-Irish-World-War-2-Story-by-Jean-Grainger.pdf
    • http://loaminoo.linkpc.net/1091092095098098093/THE-EMPEROR-S-IRISH-SLAVES-PRISONERS-OF-THE-JAPANESE-IN-THE-SECOND-WORLD-WAR-by-Robert-Widders.pdf
    • http://loaminoo.linkpc.net/1091092096090097091/Emperor-s-Irish-Slaves-Prisoners-of-the-Japanese-in-the-Second-World-War-by-Robert-Widders.pdf
    • http://loaminoo.linkpc.net/3098093095091098/The-Irish-Devil-Irish-Eyes-1-Irish-Eyes-Duo-1-by-Donna-Fletcher.pdf
    • http://loaminoo.linkpc.net/2090093098095098/Male-Medusa-Caught-in-Coils-Otherkind-Kink-Male-Medusa-1-by-Stella-Inox.pdf
    • http://loaminoo.linkpc.net/2098091097095093/Best-Kept-Secret-by-Elsa-Joseph.pdf
    • http://loaminoo.linkpc.net/3094090096092096/Fingal-O-Reilly-Irish-Doctor-Irish-Country-8-by-Patrick-Taylor.pdf
    • http://loaminoo.linkpc.net/4095098093093092/Operation-Cowboy-The-Secret-American-Mission-to-Save-the-World-s-Most-Beautiful-Horses-in-the-Last-Days-of-World-War-II-by-Stephan-Talty.pdf
    • http://loaminoo.linkpc.net/4093090097091095/Thicker-Than-Water-Coming-of-Age-Stories-by-Irish-amp-Irish-American-Writers-by-Gordon-Snell.pdf
    • http://loaminoo.linkpc.net/1093092097094/The-Fantastic-Secret-of-Owen-Jester-by-Barbara-O-39-Connor

Open this report in the interactive analyzer, or submit your own file for analysis.