Malicious PDF — malware analysis report

Static analysis result for SHA-256 d9d250847800540c…

MALICIOUS

PDF

13.0 KB Created: 2019-04-30 04:00:23 +01:00 Authoring application: mPDF 5.7
MD5: 0cd016d976327417f480d8c85570d4c1 SHA-1: 3802a9c629416f0012f7403071c1d65ebe281463 SHA-256: d9d250847800540c6b6e6a42a23c92083638a8554ca1aad5255035d5074deb8e
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1204.002 Malicious Link

The PDF contains a large number of embedded links pointing to external PDF files hosted on the domain loaminoo.linkpc.net. This behavior is indicative of a link farm or a lure to download further malicious content. The ML classifier also flagged this PDF as malicious, supporting the suspicious nature of the embedded links.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9006

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.n
    • http://loaminoo.linkpc.net/1093097093099099/Coldsleep-Lullaby-by-Andrew-Brown.pdf
    • http://loaminoo.linkpc.net/4091096096092097/Lullaby-Lullaby-1-by-Rebecca-Salas.pdf
    • http://loaminoo.linkpc.net/7093098094/The-Sometimes-Sisters-by-Carolyn-Brown.pdf
    • http://loaminoo.linkpc.net/5092094093/The-Lilac-Bouquet-by-Carolyn-Brown.pdf
    • http://loaminoo.linkpc.net/4093093096094094/Daisies-in-the-Canyon-by-Carolyn-Brown.pdf
    • http://loaminoo.linkpc.net/1090098091099095094/The-Wedding-Pearls-by-Carolyn-Brown.pdf
    • http://loaminoo.linkpc.net/1091096096093/The-Ladies-Room-by-Carolyn-Brown.pdf
    • http://loaminoo.linkpc.net/4097092092090095/The-Red-Hot-Chili-Cook-Off-by-Carolyn-Brown.pdf
    • http://loaminoo.linkpc.net/2097098096090098/Choices-The-Love-s-Valley-1-by-Carolyn-Brown.pdf
    • http://loaminoo.linkpc.net/2097099098093099/I-Love-This-Bar-Honky-Tonk-1-by-Carolyn-Brown.pdf
    • http://loaminoo.linkpc.net/6093094096091094/Lily-s-White-Lace-by-Carolyn-Brown.pdf
    • http://loaminoo.linkpc.net/4091091097097099/Kali-s-Heel-by-Carolyn-Brown-Heinz.pdf
    • http://loaminoo.linkpc.net/6098093092093093/In-Shining-Whatever-Three-Magic-Words-Trilogy-2-by-Carolyn-Brown.pdf
    • http://loaminoo.linkpc.net/2099094096099091/Cowboy-Honor-Longhorn-Canyon-2-by-Carolyn-Brown.pdf
    • http://loaminoo.linkpc.net/5092090094093095/Chance-and-Circumstance-Twenty-Years-with-Cage-and-Cunningham-by-Carolyn-Brown.pdf
    • http://loaminoo.linkpc.net/3094095093092090/Wild-Cowboy-Ways-Lucky-Penny-Ranch-1-by-Carolyn-Brown.pdf
    • http://loaminoo.linkpc.net/2097097099099091/Come-High-Water-A-Black-Swan-Historical-Romance-3-by-Carolyn-Brown.pdf
    • http://loaminoo.linkpc.net/3096095094097096/The-Last-Lullaby-The-Spellsinger-1-by-Amy-Sumida.pdf
    • http://loaminoo.linkpc.net/3093093091090095/Lullaby-by-Chuck-Palahniuk.pdf
    • http://loaminoo.linkpc.net/1090096091092095/Lullaby-The-Sand-Maiden-1-by-L-R-W-Lee.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.