Malicious PDF — malware analysis report

Static analysis result for SHA-256 da5351744a883a9c…

MALICIOUS

PDF

13.9 KB Created: 2019-05-01 20:07:38 +01:00 Authoring application: mPDF 5.7
MD5: 2fdd3b5ce57578b5feb774cda0246596 SHA-1: 9ef389e390d50884492f4f2ad8f109585269fc1b SHA-256: da5351744a883a9cca91fb98233de240715d0e4d397e6da5dffb95b7740cd87f
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF contains a large number of embedded links to external PDF files, hosted on the domain loaminoo.linkpc.net. This heuristic firing suggests a link farm or a method to distribute further malicious content. The ML classifier also flagged this PDF as malicious with high confidence. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9102

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/1096098096096092/If-I-Could-Be-A-Fly-on-the-Wall-by-Debbie-Lacy.pdf
    • http://loaminoo.linkpc.net/6090093094098/Deranged-by-Debbie-Lacy.pdf
    • http://loaminoo.linkpc.net/1096098095092093/Elements-Of-Love-by-Debbie-Lacy.pdf
    • http://loaminoo.linkpc.net/1096098099094097/The-Girls-on-the-West-Coast-by-Debbie-Lacy.pdf
    • http://loaminoo.linkpc.net/1096098097096093/The-Terrible-Ambuscade-of-Redwood-Forest-by-Debbie-Lacy.pdf
    • http://loaminoo.linkpc.net/6098093090092092/Seven-Scary-Monsters-by-Mary-Beth-Lundgren.pdf
    • http://loaminoo.linkpc.net/2092094091097092/Channeling-Morpheus-for-Scary-Mary-Ebook-Box-Set-by-Jordan-Castillo-Price.pdf
    • http://loaminoo.linkpc.net/3093098093097097/Channeling-Morpheus-for-Scary-Mary-Ebook-Box-Set-by-Jordan-Castillo-Price.pdf
    • http://loaminoo.linkpc.net/4099092097096/Scary-No-Scary-by-Zachary-Schomburg.pdf
    • http://loaminoo.linkpc.net/3098098095094090/What-She-Craves-by-Lacy-Danes.pdf
    • http://loaminoo.linkpc.net/4095098091092098/The-Last-Page-by-Lacy-Camey.pdf
    • http://loaminoo.linkpc.net/4095091094090099/Room-to-Swing-by-Ed-Lacy.pdf
    • http://loaminoo.linkpc.net/1090097097093094090/The-Women-of-Easter-Encounter-the-Savior-with-Mary-of-Bethany-Mary-of-Nazareth-and-Mary-Magdalene-by-Liz-Curtis-Higgs.pdf
    • http://loaminoo.linkpc.net/3090091091097098/Animal-Lust-by-Lacy-Danes.pdf
    • http://loaminoo.linkpc.net/1096097095093/The-Other-Side-A-Memoir-by-Lacy-M-Johnson.pdf
    • http://loaminoo.linkpc.net/1092091097090092/The-Girl-Who-Once-Thrived-by-Lacy-Marie.pdf
    • http://loaminoo.linkpc.net/5090090092095098/The-Homesteader-s-Sweetheart-by-Lacy-Williams.pdf
    • http://loaminoo.linkpc.net/4094095095098097/A-Promise-for-Breanna-Angel-of-Mercy-1-by-Al-Lacy.pdf
    • http://loaminoo.linkpc.net/1097097093092090/Six-Waking-The-Otherworld-Trilogy-2-by-Lacy-Sheridan.pdf
    • http://loaminoo.linkpc.net/3094093099099090/Mrs-Ronnie-of-Polesden-Lacy-by-Si-n-Evans.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.