Malicious PDF — malware analysis report

Static analysis result for SHA-256 d5d92ee4523cb7db…

MALICIOUS

PDF

15.8 KB Created: 2019-05-02 05:23:19 +01:00 Authoring application: mPDF 5.7
MD5: 1b6984f5ac14799c8e3f524f675f58d6 SHA-1: b7fe596f6b4f151421ea845c48a39f7b42660570 SHA-256: d5d92ee4523cb7db4606b9f5deda9fca9dad0bd5113134df2096418206788926
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1204.002 Malicious Link

The PDF contains a large number of embedded links pointing to external PDF files, hosted on the domain loaminoo.linkpc.net. This behavior is indicative of a link farm or a lure to download further malicious content. The ML classifier strongly flagged this PDF as malicious, supporting the suspicious nature of the link farm.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9892

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/4094097092099098/Half-Bloods-Rising-Half-Elf-Chronicles-1-by-J-T-Williams.pdf
    • http://loaminoo.linkpc.net/6091099090095090/Half-and-Half-Writers-on-Growing-Up-Biracial-Bicultural-by-Claudine-O-39-Hearn.pdf
    • http://loaminoo.linkpc.net/2092096094093098/Half-Heaven-Half-Heartache-Discovering-the-Transformative-Potential-in-Women-s-Popular-Fiction-by-Linda-Hilton.pdf
    • http://loaminoo.linkpc.net/2091094091/Half-Truths-The-Half-Bad-Trilogy-0-6-by-Sally-Green.pdf
    • http://loaminoo.linkpc.net/4093093/Half-Wild-The-Half-Bad-Trilogy-2-by-Sally-Green.pdf
    • http://loaminoo.linkpc.net/1094098092094094/Half-Wild-The-Half-Bad-Trilogy-2-by-Sally-Green.pdf
    • http://loaminoo.linkpc.net/8091098094097/Half-Wild-The-Half-Bad-Trilogy-2-by-Sally-Green.pdf
    • http://loaminoo.linkpc.net/8096090099091/Half-Lost-The-Half-Bad-Trilogy-3-by-Sally-Green.pdf
    • http://loaminoo.linkpc.net/9099097091/Half-Bad-The-Half-Bad-Trilogy-1-by-Sally-Green.pdf
    • http://loaminoo.linkpc.net/3091095098093092/Half-Moon-Rising-Assassin-Shifter-4-by-Sandrine-Gasq-Dion.pdf
    • http://loaminoo.linkpc.net/1094094098094097/The-Girl-On-The-Half-Shell-The-Half-Shell-Series-1-by-Susan-Ward.pdf
    • http://loaminoo.linkpc.net/9093098095096/Half-Blood-Ilyon-Chronicles-1-5-by-Jaye-L-Knight.pdf
    • http://loaminoo.linkpc.net/4090094090092/Half-Upon-a-Time-Half-Upon-a-Time-1-by-James-Riley.pdf
    • http://loaminoo.linkpc.net/1092090095091096/The-Half-Upon-a-Time-Trilogy-Half-Upon-a-Time-Twice-Upon-a-Time-Once-Upon-the-End-by-James-Riley.pdf
    • http://loaminoo.linkpc.net/3090095093093092/My-Other-Half-by-A-L-Miles.pdf
    • http://loaminoo.linkpc.net/3090090096091093/The-Half-of-Us-Family-4-by-Cardeno-C-.pdf
    • http://loaminoo.linkpc.net/5091093091096092/Half-of-What-I-Say-by-Anil-Menon.pdf
    • http://loaminoo.linkpc.net/3099098091092097/HALF-LIFE-by-M-H-Rahman.pdf
    • http://loaminoo.linkpc.net/8094095090095092/Four-and-a-Half-Shades-of-Fantasy-by-W-J-May.pdf
    • http://loaminoo.linkpc.net/9094098098096/The-Other-Half-of-the-Sky-by-Lili-Almog.pdf
    • http://loaminoo.linkpc.net/1094094098094097/The-Girl-On-The-Half-Shell

Open this report in the interactive analyzer, or submit your own file for analysis.