Malicious PDF — malware analysis report

Static analysis result for SHA-256 e10e1ae59c66379b…

MALICIOUS

PDF

16.8 KB Created: 2019-04-30 06:36:52 +01:00 Authoring application: mPDF 5.7
MD5: c05b2d25cc291eaeb37cc2d5f67c504a SHA-1: e685d40b997d0385009048ca6eb8ba0228a78afa SHA-256: e10e1ae59c66379b315b7441b9aa48cff37f4ea45c64c26147ec8cd8558caaa1
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF document was flagged by a machine learning classifier as malicious. Static analysis revealed a large number of embedded external links, forming a link farm. These links predominantly point to other PDF files hosted on the same domain, suggesting a coordinated effort to distribute content or redirect users. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/7094091099097095/Hot-Summer-Love-Box-Set-Five-Full-Length-Sexy-amp-Seductive-Summer-Sizzles-by-Cali-MacKay.pdf
    • http://loaminoo.linkpc.net/8097095099093098/Freiheit-Liberalismus-und-Wohlfahrtsstaat-Eine-analytische-Untersuchung-zur-individuellen-Freiheit-im-Klassischen-Liberalismus-und-im-Wohlfahrtsstaat-by-Hardy-Bouillon.pdf
    • http://loaminoo.linkpc.net/3095092095095098/Summer-of-Secrets-by-Nikola-Scott.pdf
    • http://loaminoo.linkpc.net/1099098092095098/Summer-of-Love-The-Principles-of-Love-5-by-Emily-Franklin.pdf
    • http://loaminoo.linkpc.net/1099099092099098/-500-Days-of-Summer-The-Shooting-Script-by-Scott-Neustadter.pdf
    • http://loaminoo.linkpc.net/1091094091098092/My-Summer-of-Love-by-Helen-Cross.pdf
    • http://loaminoo.linkpc.net/3094091096099096/The-Summer-of-Love-by-Debbie-Drechsler.pdf
    • http://loaminoo.linkpc.net/3095097090092093/Love-Is-In-The-Hallways-Love-2-by-R-J-Scott.pdf
    • http://loaminoo.linkpc.net/4094098096092098/Summer-Love-Phantom-Lover-4-by-A-J-Llewellyn.pdf
    • http://loaminoo.linkpc.net/1098090094091092/Unforgettable-Summer-So-Inn-Love-and-Better-Latte-Than-Never-by-Catherine-Clark.pdf
    • http://loaminoo.linkpc.net/7090097092094094/Summer-Love-Puppy-Have-A-Hart-6-by-Rachelle-Ayala.pdf
    • http://loaminoo.linkpc.net/1091090094090094093/A-Summer-Soundtrack-for-Falling-in-Love-by-Arden-Powell.pdf
    • http://loaminoo.linkpc.net/3093092098098096/Surf-amp-Surrender-Summer-Love-2-by-Riley-Edgewood.pdf
    • http://loaminoo.linkpc.net/1093098096096099/Summer-Dreams-Winter-Love-by-Mary-Francis-Shura.pdf
    • http://loaminoo.linkpc.net/7097096096097091/Love-on-the-Rocks-Summer-in-Whitehorse-Bay-by-Emily-Anne-Brandon.pdf
    • http://loaminoo.linkpc.net/4099093099090091/Summer-Faith-Love-and-Fried-Chicken-1-by-Laura-J-Marshall.pdf
    • http://loaminoo.linkpc.net/6098097096099097/Champagne-Murder-Frosted-Love-Cozy-Mystery-27-by-Summer-Prescott.pdf
    • http://loaminoo.linkpc.net/2095098097097099/The-Summer-Jenny-Fell-in-Love-Sweet-Dreams-13-by-Barbara-Conklin.pdf
    • http://loaminoo.linkpc.net/4099095090095094/The-Cowboy-s-Summer-Love-Grass-Valley-Cowboys-3-by-Shanna-Hatfield.pdf
    • http://loaminoo.linkpc.net/4098098095095095/Chocolate-Filled-Murder-Frosted-Love-Cozy-Mystery-16-by-Summer-Prescott.pdf
    • http://loaminoo.linkpc.net/309509

Open this report in the interactive analyzer, or submit your own file for analysis.