Malicious PDF — malware analysis report

Static analysis result for SHA-256 e34fe24c28e5dac8…

MALICIOUS

PDF

27.8 KB Created: 2019-05-02 17:15:26 +01:00 Authoring application: mPDF 5.7
MD5: 18377cce45095f785d7e83a5250a4a73 SHA-1: 7ff2ce3a413c9cb15802c12892f00cfb71c5b1c7 SHA-256: e34fe24c28e5dac8d9a970165d9933a71dd52da5208eb285bcf3f65b7211cfbf
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF was flagged by a machine learning classifier and contains a large number of external links, many of which point to PDFs on the same suspicious domain. This indicates a link farm designed to distribute or obscure malicious content. The primary attack pattern involves directing users to external resources, likely for further exploitation or phishing.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9905

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/8099098094099095/Der-Bologna-Prozess-in-Sterreich-by-Hanspeter-Schicker.pdf
    • http://loaminoo.linkpc.net/1091095094094096095/Geschichte-Der-Alten-Stadtschule-Zu-Horn-in-Nieder-sterreich-Geschichte-Der-Lateinischen-Schulmeister-Zu-Freistadt-in-Ober-sterreich-Schulordnung-Und-Institutionen-F-r-Die-Evangelische-Schule-Zu-Linz-A-D-Donau-1577-1579-Ein-Philanthropischer-Leh-by-Ost-Erziehungs-Und-Schulgeschichte.pdf
    • http://loaminoo.linkpc.net/9095098095090094/Klasse-by-Corinna-Schicker.pdf
    • http://loaminoo.linkpc.net/7091098097099096/Bologna-Italy-No-Baloney-Here-Just-History-amp-Cuisine-by-Maria-Liberati.pdf
    • http://loaminoo.linkpc.net/1090099092091098099/Datenstrukturen-in-Apl2-Mit-Anwendungen-Aus-Der-Kunstlichen-Intelligenz-by-Hanspeter-Bieri.pdf
    • http://loaminoo.linkpc.net/1090096094093097097/Black-or-white-Michael-Jackson---die-ganze-Geschichte-by-Hanspeter-K-nzler.pdf
    • http://loaminoo.linkpc.net/8099098093099092/Ehescheidung-ALS-Sozialer-Prozess-by-Manfred-Herzer.pdf
    • http://loaminoo.linkpc.net/8099096096097091/Prozess-um-eine-Leiche-by-Gunter-Pirntke.pdf
    • http://loaminoo.linkpc.net/1090094096098093092/Zur-Verbindung-Zwischen-Suffragetten-Und-Kurzfilmkomikerinnen-Der-1910er-Jahre-in-Anlehnung-an-Das-Programm-Des--Cinema-Ritrovato-in-Bologna-2008-by-Marlen-Richter.pdf
    • http://loaminoo.linkpc.net/7091099091090096/Einfuhrung-in-Die-Literaturpragmatik-Mit-Einer-Beispielanalyse-Von-Kafkas-Roman-Der-Prozess-by-Elfie-Poulain.pdf
    • http://loaminoo.linkpc.net/9093093090092099/Der-Prozess-Um-Den-Brand-Der-Synagoge-in-Neustettin-Antisemitismus-in-Deutschland-Ausgangs-Des-19-Jahrhunderts-by-Gerd-Hoffmann.pdf
    • http://loaminoo.linkpc.net/1090097095090090099/Ns-Herrschaft-In-Sterreich-1938-1945-by-Wolfgang-Neugebauer.pdf
    • http://loaminoo.linkpc.net/1091096098095092090/Parlament-Und-Verfassung-in-sterreich-Bd-1891-1895-by-Gustav-Kolmer.pdf
    • http://loaminoo.linkpc.net/1091096098095091096/Parlament-Und-Verfassung-in-sterreich-Bd-1848-1869-by-Gustav-Kolmer.pdf
    • http://loaminoo.linkpc.net/9098090097092098/Reisen-Ins-Unterirdische-Eine-Kulturgeschichte-Der-H-hlenforschung-in-sterreich-Bis-in-Die-Zwischenkriegszeit-by-Johannes-Mattes.pdf
    • http://loaminoo.linkpc.net/1090099094098097090/Festspiele-in-Nieder-sterreich-1945-2009-Panorama-Einer-Festspiellandschaft-by-Doris-Hotz.pdf
    • http://loaminoo.linkpc.net/9095096090090097/Das-Ged-chtnis-der-Menschheit-Erinnerungen-an-das-Konzentrations--und-Vernichtungslager-Majdanek-und-den-Majdanek-Prozess-by-Werner-Krebber.pdf
    • http://loaminoo.linkpc.net/1091090092092095091/Resultate-Der-Untersuchung-Der-Proben-Des-Am-10-Bez-11-M-Rz-1901-in-Italien-Sterreich-Und-Deutschland-Gefallenen-Staubregens-by-Carl-Klein.pdf
    • http://loaminoo.linkpc.net/1091090092092094099/Resultate-Der-Untersuchung-Der-Proben-Des-Am-10-Bez-11-M-rz-1901-in-Italien-sterreich-Und-Deutschland-Gefallenen-Staubregens-by-Carl-Klein.pdf
    • http://loaminoo.linkpc.net/1090099092091098092/Computational-Geometry---Methods-Algorithms-and-Applications-International-Workshop-on-Computational-Geometry-CG-91-Bern-Switzerland-March-21-22-1991-Proceedings-by-Hanspeter-Bieri.pdf
    • http://loaminoo.linkpc.net

Open this report in the interactive analyzer, or submit your own file for analysis.