Malicious PDF — malware analysis report

Static analysis result for SHA-256 e5fc02bdac9329d5…

MALICIOUS

PDF

35.9 KB Created: 2019-05-03 06:23:30 +01:00 Authoring application: mPDF 5.7
MD5: 33a80f1c133e95a60ff760a2306afa4f SHA-1: b474c0e594a0a0e5485ad5126a118a6bc05f6292 SHA-256: e5fc02bdac9329d5098def43fcf0e873409924e864f5bbd2b1973f14c4a655ff
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1059.001 PowerShell

The PDF file was flagged by a machine learning classifier as malicious and contains a large number of external links, indicating a potential link farm for SEO manipulation or distribution. While no scripts were extracted, the presence of numerous links suggests a delivery mechanism for malicious content or a redirection scheme. The document body is heavily obfuscated and unreadable.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9926

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/1090094095093091096/-Wir-haben-die-L-sungen-Gespr-che-ber-die-neue-Psychologie-und-ihre-wichtigsten-Erkenntnisse-by-Martin-Tschechne.pdf
    • http://loaminoo.linkpc.net/9092095095096098/Wissenschaftliche-Theorien-in-30-Sekunden-Die-wichtigsten-Erkenntnisse-und-Thesen-aus-der-Geschichte-der-Wissenschaft-by-Paul-Parsons.pdf
    • http://loaminoo.linkpc.net/7092099093099092/Histoire-de-la-Psychologie-Des-Grecs-Vol-5-of-5-Contenant-La-Psychologie-de-l-cole-d-Alexandrie-Livre-Second-Psychologie-Des-Successeurs-de-Plotin-by-A--Ed-Chaignet.pdf
    • http://loaminoo.linkpc.net/1090091099092093097/Erkenntnisse-aus-Atlantis-Wandlung-durch-neue-Energiemuster-Kristall-Heilung-by-Frank-Alper.pdf
    • http://loaminoo.linkpc.net/9094096093094099/Warum-die-Reichen-reicher-werden-und-Ihr-Nachbar-so-aussieht-wie-Sie-Neue-Erkenntnisse-aus-der-Sozialphysik-by-Mark-Buchanan.pdf
    • http://loaminoo.linkpc.net/1091091097095094098/Die-bedeutensten-Lebensregeln-Diese-Prinzipien-haben-immer-ihre-G-ltigkeit-by-Jack-Ribeg.pdf
    • http://loaminoo.linkpc.net/1090094095093091095/Leif-Trenkler-Ich-Liebe-Deine-Langen-Augen-I-Love-Your-Long-Eyes-by-Martin-Tschechne.pdf
    • http://loaminoo.linkpc.net/9098093097092090/Ber-hmte-V-ter-und-ihre-Kinder-Ich-w-re-gl-cklich-gewesen-Dich-als-Freund-zu-haben-by-Marie-Luise-von-der-Leyen.pdf
    • http://loaminoo.linkpc.net/9094091096093090/Einfuhrung-in-Die-Padagogische-Psychologie-Fur-Studierende-Der-Psychologie-Und-Lehramtsstudierende-by-Franziska-Perels.pdf
    • http://loaminoo.linkpc.net/8099098096099092/Flourish---Wie-Menschen-aufbl-hen-Die-Positive-Psychologie-des-gelingenden-Lebens-by-Martin-E-P-Seligman.pdf
    • http://loaminoo.linkpc.net/1091094099094094092/Das-Prinzip-Unscharfe-Managen-in-Echtzeit-Neue-Spielregeln-Neue-Markte-Neue-Chancen-in-Einer-Vernetzten-Welt-by-Stan-Davis.pdf
    • http://loaminoo.linkpc.net/9098099099093091/Das-Mutter-Vater-Kinder-Chaos-Buch-Zu-melden-haben-Eltern-sowieso-nix---hier-haben-sie-wenigstens-was-zu-lachen-by-Geert-Zebothsen.pdf
    • http://loaminoo.linkpc.net/1090091095096099096/Die-Br-ijder-und-ihre-Zeit-Familien--Kultur--und-Gesellschaftsgeschichte-im-Wendener-Land-S-dwestfalen-1495-1970-rekonstruiert-im-generationen-bergreifenden-Dialog-in-Fotografien-und-Erz-hlungen-Neue-Formen-des-intergenerationalen-Lernens-by-Joachim-Br-cher.pdf
    • http://loaminoo.linkpc.net/1091093091092096094/-quot-Macht-will-ich-haben-quot-Die-Erziehung-des-Hitlerjungen-G-nther-Roos-zum-Nationalsozialisten-by-Martin-R-ther.pdf
    • http://loaminoo.linkpc.net/1091097092097096097/Neue-Briefe-chr-Mart-Vornehmlich-an-Sophie-von-La-Roche-by-Robert-Hassencamp-Christoph-Martin-Wieland.pdf
    • http://loaminoo.linkpc.net/1091098099096090092/Bedeutung-Der-Psychologie-in-Der-Reproduktionsmedizin-Bedeutung-Der-Psychologie-in-Der-Reproduktionsmedizin-Bedeutung-Der-Psychologie-in-Der-Reproduktionsmedizin-Bedeutung-Der-Psychologie-in-Der-Reproduktionsmedizin-Bedeutung-Der-PS-by-Ingrid-Kowalcek.pdf
    • http://loaminoo.linkpc.net/1090097095091096092/Die-Messianische-Weissagung-Und-Ihre-Erf-Llung-Mit-Besonderer-Beziehung-Auf-Ihre-Behandlung-in-Der-Schule-by-Julius-Richter.pdf
    • http://loaminoo.linkpc.net/1090097095091096094/Die-Messianische-Weissagung-Und-Ihre-Erf-llung-Mit-Besonderer-Beziehung-Auf-Ihre-Behandlung-in-Der-Schule-by-Julius-Richter.pdf
    • http://loaminoo.linkpc.net/1091096095094096092/Franz-Petrarch-s-Bekenntnisse-in-Uebertragungen-Seines-Briefes-an-Die-Nachwelt-Und-Seiner-Drei-Gespr-che-ber-Die-Verachtung-Der-Welt-by-Francesco-Petrarca.pdf
    • http://loaminoo.linkpc.net/9096090090099096/Neue-Freunde-finden-In-3-Monaten-neue-Freunde-finden---garantiert-by-Cornelius-Gehrmann.pdf
    • http://loaminoo.linkpc.net/7092099093099092/Histoire-de-la-Psychologie-Des-Grecs-Vol-5-of-5-Contenant-La-Psychologie-de-l-cole-d-Alexandrie-Livre-Second-Psychologie-Des-Successeurs-de-Plotin-by

Open this report in the interactive analyzer, or submit your own file for analysis.