Malicious PDF — malware analysis report

Static analysis result for SHA-256 d853ca6e023e1afc…

MALICIOUS

PDF

16.5 KB Created: 2019-04-29 23:29:10 +01:00 Authoring application: mPDF 5.7
MD5: de040850ae5980e55f4b7f0ca6163368 SHA-1: 7cc41c96a50806af068c1a73452bd35814e5e08d SHA-256: d853ca6e023e1afc649b3d4150bb905aa293ae9b65a0a99702c862b07e6f0c31
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF file was flagged by a machine learning classifier as malicious. Static analysis revealed a large number of embedded links, forming a link farm. These links predominantly point to the domain loaminoo.linkpc.net, suggesting a coordinated effort to distribute content or redirect users to potentially harmful sites. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9898

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/6091093096090095/Hikari-No-Densetsu-Tome-1-Legend-Of-Hikari-by-Izumi-As-.pdf
    • http://loaminoo.linkpc.net/6091093097091094/Hikari-no-densetsu-Tome-4-by-Izumi-As-.pdf
    • http://loaminoo.linkpc.net/6091093098091096/Hikari-No-Densetsu-by-Jesse-Russell.pdf
    • http://loaminoo.linkpc.net/6091093098099091/-Kawa-no-Hikari-by-Hisaki-Matsuura.pdf
    • http://loaminoo.linkpc.net/6091093098099090/Hikari-No-Tabibito-by-Gene-Brewer.pdf
    • http://loaminoo.linkpc.net/8090096094095098/Non-Compos-Mentis-by-Hikari-ni-Michita-Sora.pdf
    • http://loaminoo.linkpc.net/6091093097091093/Kimi-ga-Terasu-Koi-no-Hikari-by-Haruna-Takayama.pdf
    • http://loaminoo.linkpc.net/6091093099098094/Inferno-Tenbatsu-no-hikari-by-Bani-Yoshida.pdf
    • http://loaminoo.linkpc.net/6091093098098093/Rojieru-Hikari-To-Yami-No-Yubiwa-by-An-Momoi.pdf
    • http://loaminoo.linkpc.net/6091093096091096/Sickness-Unto-Death-Part-2-by-Hikari-Asada.pdf
    • http://loaminoo.linkpc.net/6091093098098094/Yami-To-Hikari-No-S-yoku-by-Shiina-Takasato.pdf
    • http://loaminoo.linkpc.net/6091093099096098/Sakura-tenshi-no-hikari---Episode-10-by-Jonathan-Lawrence.pdf
    • http://loaminoo.linkpc.net/6091093097092093/Sakura-tenshi-no-hikari---Episode-1-by-Jonathan-Lawrence.pdf
    • http://loaminoo.linkpc.net/6091093097092095/Sushi-Its-Unknown-Varieties-and-History-by-Hikari-Dept-.pdf
    • http://loaminoo.linkpc.net/6091093099098096/Cats-in-their-heaven-neko-no-hikari-by-Kawakami-Ryuta.pdf
    • http://loaminoo.linkpc.net/6091093098099092/Tegamibachi-Hikari-To-Ao-No-Gens-Yawa-by-Tatsuya-Hamazaki.pdf
    • http://loaminoo.linkpc.net/6091093096091095/The-Music-of-Light-The-Extraordinary-Story-of-Hikari-and-Kenzaburo-Oe-by-Lindsley-Cameron.pdf
    • http://loaminoo.linkpc.net/6091093098099098/Yoshoku-and-Chuka-The-Japanized-Western-and-Chinese-Dishes-by-Hikari-Dept-.pdf
    • http://loaminoo.linkpc.net/8090093092096096/--Ambition-In-A-Kingdom-of-Afternoon-Naps-Densetsu-no-Yuusha-no-Densetsu-1-by-Takaya-Kagami.pdf
    • http://loaminoo.linkpc.net/7098093090090095/High-Speed-Rail-in-Japan-Shinkansen-Hikari-Kodama-Nozomi-Ch-Shinkansen-Hayabusa-Narita-Shinkansen-Asama-Tsubame-Akita-Relay-Sakura-by-Books-LLC.pdf
    • http://loaminoo.linkpc.net/60910930

Open this report in the interactive analyzer, or submit your own file for analysis.