Malicious PDF — malware analysis report

Static analysis result for SHA-256 e27747d778e8973b…

MALICIOUS

PDF

14.7 KB Created: 2019-05-02 01:36:29 +01:00 Authoring application: mPDF 5.7
MD5: cc2e0658ca25728c77936e01416cba12 SHA-1: 6bba346da1753143f82860d041d76871218d753f SHA-256: e27747d778e8973b42bf436226833575cfb3cfbbfa42be792ac35a46b0de94e0
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF file contains a large number of embedded links to external PDFs hosted on the domain 'loaminoo.linkpc.net'. This domain and the structure of the links suggest a link farm or SEO manipulation tactic, likely intended to drive traffic or distribute further malicious content. While no scripts were extracted, the PDF structure and the sheer volume of links point to a malicious intent to redirect users to potentially harmful content.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9891

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/8095093091095096/Fatal-Attraction-by-Kia-Meche-39-.pdf
    • http://loaminoo.linkpc.net/1097099094095095/The-Method---How-To-Apply-The-Law-Of-Attraction-amp-Get-Everything-You-Want-Out-Of-Life-Law-Of-Attraction-Series-Book-1-by-Scott-Soloff.pdf
    • http://loaminoo.linkpc.net/3092094094091090/An-Enrapturing-Attraction-The-Attraction-Series-3-by-A-J-Walters.pdf
    • http://loaminoo.linkpc.net/2098096093094097/A-Constant-Attraction-The-Attraction-Series-2-by-A-J-Walters.pdf
    • http://loaminoo.linkpc.net/8095094096093098/Fierce-Attraction-Attraction-Series-3-by-J-B-Heller.pdf
    • http://loaminoo.linkpc.net/3094097097096094/An-Acute-Attraction-The-Attraction-Series-1-by-A-J-Walters.pdf
    • http://loaminoo.linkpc.net/8095093094090090/Fatal-Season-1-Compilation-of-Episodes-1---9-Fatal---The-Series-by-Arno-Joubert.pdf
    • http://loaminoo.linkpc.net/3090099095098092/Forever-Attraction-Attraction-2-by-S-K-Logsdon.pdf
    • http://loaminoo.linkpc.net/2098093095099092/Fatal-Affair-Fatal-1-by-Marie-Force.pdf
    • http://loaminoo.linkpc.net/8090096096092095/Fatal-Reckoning-Fatal-14-by-Marie-Force.pdf
    • http://loaminoo.linkpc.net/2090094099098/Fatal-Justice-Fatal-2-by-Marie-Force.pdf
    • http://loaminoo.linkpc.net/1097093098091099/Fatal-Justice-Fatal-2-by-Marie-Force.pdf
    • http://loaminoo.linkpc.net/1092099096092098/Fatal-Affair-Fatal-1-by-Marie-Force.pdf
    • http://loaminoo.linkpc.net/1097093096095098/Fatal-Flaw-Fatal-4-by-Marie-Force.pdf
    • http://loaminoo.linkpc.net/1097093097090093/Fatal-Mistake-Fatal-6-by-Marie-Force.pdf
    • http://loaminoo.linkpc.net/2091097092091094/Fatal-Deception-Fatal-5-by-Marie-Force.pdf
    • http://loaminoo.linkpc.net/8095093091091096/Somebody-Else-s-Guy-2-by-Kia-Meche-39-.pdf
    • http://loaminoo.linkpc.net/1096091092093093/Genetic-Attraction-Genetic-Attraction-2-by-Tara-Lain.pdf
    • http://loaminoo.linkpc.net/8095093091090097/No-One-Can-Love-You-Better-2-by-Kia-Meche-39-.pdf
    • http://loaminoo.linkpc.net/8095093091092091/Spawns-Of-A-Thug-2-by-Kia-Meche-39-.pdf
    • http://loaminoo.linkpc.net/2098093095099092/Fatal-Affair-Fatal-1-by-Marie-Fo

Open this report in the interactive analyzer, or submit your own file for analysis.