Malicious PDF — malware analysis report

Static analysis result for SHA-256 de285d80371da0bd…

MALICIOUS

PDF

16.9 KB Created: 2019-04-30 18:52:32 +01:00 Authoring application: mPDF 5.7
MD5: d7e9ae024c99d8a17898c2b916361ee9 SHA-1: f399116f0c6888a44dd73834199ad64723c1870a SHA-256: de285d80371da0bddf12378f6a9f917aedc3f9805d6bdc4a9ad5e4b8fb492c7c
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF file was flagged by a machine learning classifier as malicious. It contains a large number of embedded links, forming a link farm, with the dominant host being loaminoo.linkpc.net. This suggests a tactic to distribute malicious content or drive traffic to potentially compromised websites. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.n
    • http://loaminoo.linkpc.net/1094097090094094/This-is-Falling-Falling-1-by-Ginger-Scott.pdf
    • http://loaminoo.linkpc.net/4094098092094/This-is-Falling-Falling-1-by-Ginger-Scott.pdf
    • http://loaminoo.linkpc.net/1094098094097098/You-and-Everything-After-Falling-2-by-Ginger-Scott.pdf
    • http://loaminoo.linkpc.net/6096096093093/The-Girl-I-Was-Before-Falling-3-by-Ginger-Scott.pdf
    • http://loaminoo.linkpc.net/3097090099/The-Hard-Count-by-Ginger-Scott.pdf
    • http://loaminoo.linkpc.net/3091097/Wild-Reckless-Harper-Boys-1-by-Ginger-Scott.pdf
    • http://loaminoo.linkpc.net/8099096099095096/The-Wedding-of-Ginger-amp-Basil-Ginger-Gold-Mysteries-7-5-by-Lee-Strauss.pdf
    • http://loaminoo.linkpc.net/1090098094093096/Waiting-on-the-Sidelines-Waiting-on-the-Sidelines-1-by-Ginger-Scott.pdf
    • http://loaminoo.linkpc.net/6098099095095/The-Falling-of-Love-Falling-1-by-Marisa-Oldham.pdf
    • http://loaminoo.linkpc.net/1090091094099097/The-Falling-of-Love-Falling-1-by-Marisa-Oldham.pdf
    • http://loaminoo.linkpc.net/9091092092095/Falling-For-Cade-Falling-For-1-by-Ra-39-chael-Ohara.pdf
    • http://loaminoo.linkpc.net/3099097097098091/The-Falling-of-Hope-Falling-3-by-Marisa-Oldham.pdf
    • http://loaminoo.linkpc.net/3094091090095/Falling-into-You-Falling-1-by-Jasinda-Wilder.pdf
    • http://loaminoo.linkpc.net/2097099093093097/Falling-Into-Us-Falling-2-by-Jasinda-Wilder.pdf
    • http://loaminoo.linkpc.net/1093092/Falling-Away-Falling-4-by-Jasinda-Wilder.pdf
    • http://loaminoo.linkpc.net/4096090095091090/Falling-Into-You-Falling-1-by-Jasinda-Wilder.pdf
    • http://loaminoo.linkpc.net/3090098099099094/Falling-to-Pieces-Falling-1-by-L-T-Kelly.pdf
    • http://loaminoo.linkpc.net/1097090092098099/Falling-into-Surrender-Falling-3-by-A-Zavarelli.pdf
    • http://loaminoo.linkpc.net/4091094098097/Falling-into-Us-Falling-2-by-Jasinda-Wilder.pdf
    • http://loaminoo.linkpc.net/1091098099099090098/Flappers-and-Philosophers-1920-by-Francis-Scott-Fitzgerald-Francis-Scott-Key-Fitzgerald-September-24-1896---December-21-1940-Known-Professionally-as-F-Scott-Fitzgerald-Was-an-American-Novelist-and-Short-Story-Writer-Whose-Works-Illustrate-by-F-Scott-Fitzgerald.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.