Malicious PDF — malware analysis report

Static analysis result for SHA-256 d91ccde5f030bac3…

MALICIOUS

PDF

17.4 KB Created: 2019-04-29 23:37:06 +01:00 Authoring application: mPDF 5.7
MD5: c227a83880bdfe576767b910601a703e SHA-1: 0af8c7f4d877af25337e1ed6a455ac974e5bb33f SHA-256: d91ccde5f030bac3b418d8d8cf55bd88b384171b6d5ba5286e8e6e45a88ede28
90 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell

The PDF contains a large number of embedded links to external PDF files, hosted on the domain loaminoo.linkpc.net. This behavior is indicative of a link farm or a redirection scheme designed to lead users to potentially malicious content. The ML classifier strongly supports the malicious verdict.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/4093094090091099/Divided-Loyalties-by-Patricia-Scanlan.pdf
    • http://loaminoo.linkpc.net/3093092092099099/City-Lives-by-Patricia-Scanlan.pdf
    • http://loaminoo.linkpc.net/4093094090093095/Double-Wedding-by-Patricia-Scanlan.pdf
    • http://loaminoo.linkpc.net/4093094091098093/Mirror-Mirror-by-Patricia-Scanlan.pdf
    • http://loaminoo.linkpc.net/8095096090098099/Adoption-is-a-Family-Affair-What-Relatives-and-Friends-Must-Know-by-Patricia-Irwin-Johnston.pdf
    • http://loaminoo.linkpc.net/9091093094097095/Wegerly-The-Worm-and-Friends-In-the-Nick-of-Time-by-Gary-Harris.pdf
    • http://loaminoo.linkpc.net/1093097098098090/Rebellion-by-W-J-Scanlan.pdf
    • http://loaminoo.linkpc.net/4096096099095096/Away-West-Scraps-of-Time-2-by-Patricia-C-McKissack.pdf
    • http://loaminoo.linkpc.net/9098094095096090/Zaira---A-Girl-Before-Her-Time-by-Patricia-Borlenghi.pdf
    • http://loaminoo.linkpc.net/2099096099094096/This-Time-Forever-Glebe-Point-1-by-Patricia-Paris.pdf
    • http://loaminoo.linkpc.net/7093096096097/A-Ditch-in-Time-The-City-the-West-and-Water-by-Patricia-Nelson-Limerick.pdf
    • http://loaminoo.linkpc.net/3090099091099092/SEX-LOVE-FRIENDS-amp-THE-COFFEE-SHOP-When-the-cost-of-first-time-love-could-mean-hurting-the-ones-clostest-to-you-by-M-D-Smith.pdf
    • http://loaminoo.linkpc.net/4099099099098093/Time-Trip-A-Time-After-Time-Reincarnation-Novella-Time-After-Time-Reincarnation-Lives-Book-1-by-Wendy-Godding.pdf
    • http://loaminoo.linkpc.net/1092090092097097/Friends-Like-These-Friends-Like-These-1-by-Hannah-Ellis.pdf
    • http://loaminoo.linkpc.net/2097096094099096/Friends-Is-Friends-by-Greg-Cook.pdf
    • http://loaminoo.linkpc.net/1094097090093094/Let-s-Be-Just-Friends-Just-Friends-1-by-Camilla-Isley.pdf
    • http://loaminoo.linkpc.net/4090098095/Just-Friends-Friends-1-by-Monica-Murphy.pdf
    • http://loaminoo.linkpc.net/9093092092095090/DC-Super-Friends-Volume-2-Calling-All-Super-Friends-by-Sholly-Fisch.pdf
    • http://loaminoo.linkpc.net/4094095098099092/The-Big-Book-Of-Time-Travel-Romance-Includes-After-Cilmeri-0-5-Lost-Highlander-1-The-McKinnon-Legends-1-Out-of-Time-1-Time-Walkers-1-by-Sarah-Woodbury.pdf
    • http://loaminoo.linkpc.net/9093092093090097/DC-Super-Friends-Wanted-The-Super-Friends-by-Sholly-Fisch.pdf
    • http://loaminoo.linkpc.net/3090099091099092/SEX-LOVE-FRIENDS-amp-THE-COFFEE-SHOP-When-the-cost-of-first-time-love-could-mean-hurting-the-ones-clostest-to-you-b

Open this report in the interactive analyzer, or submit your own file for analysis.