Malicious PDF — malware analysis report

Static analysis result for SHA-256 d3d7f092d4db13c4…

MALICIOUS

PDF

16.5 KB Created: 2019-04-30 03:14:35 +01:00 Authoring application: mPDF 5.7
MD5: a2fc95bb14025a298cdb3af6c95477fa SHA-1: 3079c28759d7412e3578de412a0c8cfb1e47148b SHA-256: d3d7f092d4db13c43f086e2a8068d3d88f2b4319af986a58b01a17767926a601
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF document contains a large number of embedded links, identified by the PDF_SEO_LINK_FARM heuristic. The ML classifier also flagged this PDF as malicious with high confidence. The primary attack pattern appears to be a link farm, likely intended to direct users to malicious content or for SEO manipulation. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9898

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/4095098094094094/Psyche-s-Weathers-by-Cynthia-Atkins.pdf
    • http://loaminoo.linkpc.net/2090090099097095/Psyche-Shield-Psyche-Moon-3-by-Chrissie-Buhr.pdf
    • http://loaminoo.linkpc.net/1091091092098096099/Dr-Atkins-New-Carbohydrate-Gram-Counter-by-Robert-C-Atkins.pdf
    • http://loaminoo.linkpc.net/8091099095095/Dr-Atkins-New-Diet-Revolution-by-Robert-C-Atkins.pdf
    • http://loaminoo.linkpc.net/2098095091096092/Dr-Atkins-New-Diet-Revolution-by-Robert-C-Atkins.pdf
    • http://loaminoo.linkpc.net/8099090092091094/Atkins-Diet-For-a-Simple-Start-21-Days-Atkins-Diet-Plan-for-Beginners-by-Natalie-Kordon.pdf
    • http://loaminoo.linkpc.net/1098095093098099/Left-for-Dead-My-Journey-Home-from-Everest-by-Beck-Weathers.pdf
    • http://loaminoo.linkpc.net/2096090097097096/On-the-Nature-of-the-Psyche-by-C-G-Jung.pdf
    • http://loaminoo.linkpc.net/2095098098099096/Psyche-s-Search-Transformation-2-by-Ann-Gimpel.pdf
    • http://loaminoo.linkpc.net/3092095095092093/Psyche-s-Gate-by-Dani-Smith.pdf
    • http://loaminoo.linkpc.net/1096098090092090/Crazy-Like-Us-The-Globalization-of-the-American-Psyche-by-Ethan-Watters.pdf
    • http://loaminoo.linkpc.net/5098097092099094/Cupid-amp-Psyche-and-Vienna-A-Correspondence-Miam-5-by-Bob-Perelman.pdf
    • http://loaminoo.linkpc.net/1091097093098098097/The-Alchemy-of-Healing-Psyche-and-Soma-by-Edward-C-Whitmont.pdf
    • http://loaminoo.linkpc.net/2095093092091091/Crazy-Like-Us-The-Globalization-of-the-American-Psyche-by-Ethan-Watters.pdf
    • http://loaminoo.linkpc.net/9091095095091095/Ego-and-Archetype-Individuation-and-the-Religious-Function-of-the-Psyche-by-Edward-F-Edinger.pdf
    • http://loaminoo.linkpc.net/1097093090090096/The-Psyche-Diver-Trilogy-Demon-Hunters-by-Baku-Yumemakura.pdf
    • http://loaminoo.linkpc.net/7098095094098093/A-Russian-Psyche-The-Poetic-Mind-of-Marina-Tsvetaeva-by-Alyssa-W-Dinega.pdf
    • http://loaminoo.linkpc.net/7091091094097/Making-the-Gods-Work-for-You-The-Astrological-Language-of-the-Psyche-by-Caroline-W-Casey.pdf
    • http://loaminoo.linkpc.net/5091098091098/Transformation-of-the-Psyche-The-Symbolic-Alchemy-of-the-Spendor-Solis-by-Joseph-L-Henderson.pdf
    • http://loaminoo.linkpc.net/3092090097098095/Scorched-Eros-and-Psyche---A-Myth-Origin-of-Love-Book-2-by-Jendela-Tryst.pdf
    • http://loaminoo.linkpc.net/1096098090092090/Crazy-Like-Us-The-Globalization-of-the-American-Psyche-by-Ethan-Wat

Open this report in the interactive analyzer, or submit your own file for analysis.