Malicious PDF — malware analysis report

Static analysis result for SHA-256 d9005d1790705d16…

MALICIOUS

PDF

19.2 KB Created: 2019-05-02 05:45:39 +01:00 Authoring application: mPDF 5.7
MD5: 04bc3cfb3ee6086a105df9efcf27e658 SHA-1: ab6f36539db4cedf04e3c2bb80dfa1aac7b2b86e SHA-256: d9005d1790705d16a73907eb10b0fdf30641a5529f03fe86109a52b66f60a18f
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1566.002 Spearphishing Link

The PDF contains a large number of embedded links to external websites, as indicated by the PDF_SEO_LINK_FARM heuristic. While the specific URLs extracted are currently marked as confirmed_benign, the sheer volume and structure suggest a malicious intent, likely for SEO spam or to redirect users to malicious content. The ML_NYX_PDF_MALICIOUS heuristic further supports the malicious classification.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9920

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/8095099095094093/City-of-Light-City-of-Poison-Murder-Magic-and-the-First-Police-Chief-of-Paris-by-Holly-Tucker.pdf
    • http://loaminoo.linkpc.net/2093094097097098/Gothic-City-Lights-by-Brindle-Chase.pdf
    • http://loaminoo.linkpc.net/3095097098097098/Dark-City-Lights-New-York-Short-Stories-Have-a-NYC-4-by-Lawrence-Block.pdf
    • http://loaminoo.linkpc.net/1090092091095094090/Paris-at-the-End-of-the-World-How-the-City-of-Lights-Soared-in-Its-Darkest-Hour-1914-1918-by-John-Baxter.pdf
    • http://loaminoo.linkpc.net/1099095094098098/Killing-Time-in-Crystal-City-by-Chris-Lynch.pdf
    • http://loaminoo.linkpc.net/2095096092099095/Pack-Rules-City-Wolves-1-by-J-C-Holly.pdf
    • http://loaminoo.linkpc.net/3097092095093097/The-Sweetest-Kind-of-Fate-Windy-City-Magic-2-by-Crystal-Cestari.pdf
    • http://loaminoo.linkpc.net/3097096090091/City-of-Bones-City-of-Ashes-City-of-Glass-City-of-Fallen-Angels-City-of-Lost-Souls-The-Mortal-Instruments-1-5-by-Cassandra-Clare.pdf
    • http://loaminoo.linkpc.net/4098093094096091/City-of-Bones-City-of-Ashes-City-of-Glass-City-of-Fallen-Angels-City-of-Lost-Souls-The-Mortal-Instruments-1-5-by-Cassandra-Clare.pdf
    • http://loaminoo.linkpc.net/2094092094095099/Under-the-Lights-Bright-Lights-1-by-Tia-Louise.pdf
    • http://loaminoo.linkpc.net/1091092098099095/The-Best-Kind-of-Magic-Windy-City-Magic-1-by-Crystal-Cestari.pdf
    • http://loaminoo.linkpc.net/9091092097095098/Radiation-Protection-in-Medicine-Proceedings-of-the-Twenty-Eighth-Annual-Meeting-1-2-April-1992-As-Presented-at-the-Crystal-City-Marriott-Arlin-by-Andrew-K-Poznanski.pdf
    • http://loaminoo.linkpc.net/2095092097096096/Refracted-Crystal-Diamonds-and-Desire-The-Crystal-Fragments-Trilogy-3-by-M-J-Lawless.pdf
    • http://loaminoo.linkpc.net/1097091095095094/Fragile-Crystal-Rubies-and-Rivalries-The-Crystal-Fragments-Trilogy-2-by-M-J-Lawless.pdf
    • http://loaminoo.linkpc.net/9095091094097/Crystal-Promise-The-Shattered-Crystal-1-by-James-Funfer.pdf
    • http://loaminoo.linkpc.net/2090093098097090/Zelda-and-the-Crystal-Slippers-The-Crystal-Adventures-1-by-R-W-Mitchell.pdf
    • http://loaminoo.linkpc.net/1095099096095090/Crystal-Line-Crystal-Singer-3-by-Anne-McCaffrey.pdf
    • http://loaminoo.linkpc.net/4093093098094093/Crystal-Traveler-Crystal-Message-Chronicles-1-by-R-B-Breighton.pdf
    • http://loaminoo.linkpc.net/5095099095091097/Zelda-and-the-Crystal-Comb-The-Crystal-Adventures-3-by-R-W-Mitchell.pdf
    • http://loaminoo.linkpc.net/2099095098099096/Holly-s-Inbox-by-Holly-Denham.pdf
    • http://loaminoo.linkpc.net/3097096090091/City-of-Bones-City-of-Ashes-City-of-Glass-City-of-Fallen-Angels-City-of-Lost-Souls-The-Mortal-Instruments-1-5-by-Cassandra

Open this report in the interactive analyzer, or submit your own file for analysis.