Malicious PDF — malware analysis report

Static analysis result for SHA-256 d5774df4494a2b40…

MALICIOUS

PDF

15.4 KB Created: 2019-04-30 04:02:14 +01:00 Authoring application: mPDF 5.7
MD5: 14d999199e9988b35e2baa0f0af9905d SHA-1: 7a84798f5b9fe0771896747218fd296de9b9a8b5 SHA-256: d5774df4494a2b401e95f4fa11463736cb7a16eb7420d3e2f284a1ae95a26a24
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF contains a large number of embedded links to external PDF files, hosted on the dynamic DNS domain loaminoo.linkpc.net. This behavior is indicative of a link farm or a redirection scheme designed to lead users to potentially malicious content. The ML classifier strongly supports the malicious verdict.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9880

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/6095099096094092/Secret-s-Shadow-Cassidy-McCabe-1-by-Alex-Matthews.pdf
    • http://loaminoo.linkpc.net/2094091094099095/Shadow-Enemies-Hitler-s-Secret-Terrorist-Plot-Against-the-United-States-by-Alex-Abella.pdf
    • http://loaminoo.linkpc.net/1090095098097090/Cassidy-Jones-and-the-Secret-Formula-Cassidy-Jones-Adventures-1-by-Elise-Stokes.pdf
    • http://loaminoo.linkpc.net/2099090096093098/Cassidy-Jones-and-the-Secret-Formula-Cassidy-Jones-Adventures-1-by-Elise-Stokes.pdf
    • http://loaminoo.linkpc.net/6098097092098099/Untold-Alex-and-Cassidy-5-by-Nancy-Ann-Healy.pdf
    • http://loaminoo.linkpc.net/6098097092094091/Escape-from-Shadow-Island-Max-Cassidy-1-by-Paul-Adam.pdf
    • http://loaminoo.linkpc.net/4095094090094096/Her-Secret-His-Duty-The-Adair-Legacy-1-by-Carla-Cassidy.pdf
    • http://loaminoo.linkpc.net/6095099096090095/Night-Shadows-A-Rebekah-McCabe-Mystery-Rebekah-McCabe-Mysteries-Book-1-by-Bill-Craig.pdf
    • http://loaminoo.linkpc.net/2096092093099095/The-Darkest-Secret-by-Alex-Marwood.pdf
    • http://loaminoo.linkpc.net/3092097099097096/The-Tesla-Secret-The-Project-5-by-Alex-Lukeman.pdf
    • http://loaminoo.linkpc.net/8092093097099/Secret-of-the-Slaves-Rogue-Angel-8-by-Alex-Archer.pdf
    • http://loaminoo.linkpc.net/6093095095097096/Beneath-the-Metropolis-The-Secret-Lives-of-Cities-by-Alex-Marshall.pdf
    • http://loaminoo.linkpc.net/1094093090096093/Indian-Summer-The-Secret-History-of-the-End-of-an-Empire-by-Alex-von-Tunzelmann.pdf
    • http://loaminoo.linkpc.net/2099090096093099/Cassidy-Jones-and-Vulcan-s-Gift-Cassidy-Jones-Adventures-2-by-Elise-Stokes.pdf
    • http://loaminoo.linkpc.net/6093091092091095/Cassidy-Jones-and-the-Seventh-Attendant-Cassidy-Jones-Adventures-3-by-Elise-Stokes.pdf
    • http://loaminoo.linkpc.net/5094092097098/Cassidy-Jones-and-Vulcan-s-Gift-Cassidy-Jones-Adventures-2-by-Elise-Stokes.pdf
    • http://loaminoo.linkpc.net/9099098090092097/Lights-Camera-Action-The-Secret-World-of-Alex-Mack-33-by-Ray-Garton.pdf
    • http://loaminoo.linkpc.net/1090097097091099/The-Secret-of-Shadow-Thunderstorm-and-the-Elementals-1-by-T-J-Silver.pdf
    • http://loaminoo.linkpc.net/3093092099090091/Cassidy-Jones-and-the-Luminous-Cassidy-Jones-Adventures-4-by-Elise-Stokes.pdf
    • http://loaminoo.linkpc.net/1096096095099093/Shadow-Mountain-and-the-Secret-of-the-Gatekeepers-by-Vance-Smith.pdf
    • http://loaminoo.linkpc.net/6093095095097096/Ben

Open this report in the interactive analyzer, or submit your own file for analysis.