Malicious PDF — malware analysis report

Static analysis result for SHA-256 d55fd8f5c4ed1d2a…

MALICIOUS

PDF

14.9 KB Created: 2019-04-30 05:11:32 +01:00 Authoring application: mPDF 5.7
MD5: e9cdc5ed06d8f5c85c26813a48036172 SHA-1: dcac030e1dbf9c40659163f90196f897433df054 SHA-256: d55fd8f5c4ed1d2a35064e56d79545636d86abb04255abc7e1bdd9e00d3b1fbe
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF contains a large number of embedded URLs pointing to external PDF files, characteristic of a link farm. The ML classifier also flagged this document as malicious. While no scripts were extracted, the structure and embedded URLs suggest a social engineering attempt to direct users to potentially malicious content hosted on the `loaminoo.linkpc.net` domain.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9891

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/5098090090094090/Ang-lique-in-opstand-by-Anne-Golon.pdf
    • http://loaminoo.linkpc.net/5098090090097099/Ang-lique-et-le-Roy-Version-d-origine-by-Anne-Golon.pdf
    • http://loaminoo.linkpc.net/5097099099099095/Ang-lique-Tome-5-Ombres-et-lumi-res-by-Anne-Golon.pdf
    • http://loaminoo.linkpc.net/5098090090092095/Ang-lica-Cativa-no-Har-m-Ang-lica-Marquesa-dos-Anjos-8-by-Anne-Golon.pdf
    • http://loaminoo.linkpc.net/4094090098098094/Angelique-in-Revolt-Angelique-Original-version-5-by-Anne-Golon.pdf
    • http://loaminoo.linkpc.net/8093099090097/Angelique-Angelique-Original-version-1-by-Anne-Golon.pdf
    • http://loaminoo.linkpc.net/5097099099098095/Angelique-in-New-Light-Angelique-and-Her-Love-Temptation-of-Angelique-by-Anne-Golon.pdf
    • http://loaminoo.linkpc.net/5097099098097090/Journey-of-Self-Six-Months-in-the-Japanese-Countryside-by-Nate-Golon.pdf
    • http://loaminoo.linkpc.net/2092093091094094/Inside-Anne-Frank-s-House-An-Illustrated-Journey-Through-Anne-s-World-by-Anne-Frank-House.pdf
    • http://loaminoo.linkpc.net/6096099091093099/Anne-Tina-Hateup-H-jo-Anne-of-Green-Gables-Sundanese-Edition-by-L-M-Montgomery.pdf
    • http://loaminoo.linkpc.net/9095090093098098/Anne-of-Green-Gables-The-Complete-Anne-Shirley-Series-by-L-M-Montgomery.pdf
    • http://loaminoo.linkpc.net/4094091099098093/The-Anne-Stories-Anne-of-Green-Gables-1-3-5-7-8-Story-Girl-1-2-by-L-M-Montgomery.pdf
    • http://loaminoo.linkpc.net/6099092096092099/Anne-s-House-of-Dreams-Anne-of-Green-Gables-Series-5-by-L-M-Montgomery.pdf
    • http://loaminoo.linkpc.net/6096096094095/Anne-s-House-of-Dreams-Anne-of-Green-Gables-5-by-L-M-Montgomery.pdf
    • http://loaminoo.linkpc.net/7090091093096091/Anne-of-Avonlea-Anne-of-Green-Gables-2-by-L-M-Montgomery.pdf
    • http://loaminoo.linkpc.net/2092099095095091/Yours-Anne-The-Life-of-Anne-Frank-by-Lois-Metzger.pdf
    • http://loaminoo.linkpc.net/3091094094092099/Anne-of-the-Island-Anne-of-Green-Gables-3-by-L-M-Montgomery.pdf
    • http://loaminoo.linkpc.net/7090091093096096/Anne-of-the-Island-Anne-of-Green-Gables-3-by-L-M-Montgomery.pdf
    • http://loaminoo.linkpc.net/8090098093099090/Anne-p-Gr-nkulla-Anne-of-Green-Gables-1-by-L-M-Montgomery.pdf
    • http://loaminoo.linkpc.net/2094094090092095/Queen-Anne-The-Politics-of-Passion-by-Anne-Somerset.pdf
    • http://loaminoo.linkpc.net/4094091099098093/The-Anne-Stories-Anne-of-Green-Gables-1-3-5-7-8-Story-Girl-1-2-by-L-M-Montgome

Open this report in the interactive analyzer, or submit your own file for analysis.