Malicious PDF — malware analysis report

Static analysis result for SHA-256 e9a6ad6afa0d487e…

MALICIOUS

PDF

17.0 KB Created: 2019-04-30 18:41:44 +01:00 Authoring application: mPDF 5.7
MD5: 36ba14452ba24da03e3c04166c38a856 SHA-1: 68dfacb759a38d2775fb01d775759f3d53219993 SHA-256: e9a6ad6afa0d487e649f158503f934c79cb8a030511d433386828e2bca7258ab
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF contains a large number of links to external PDF files, hosted on a dynamic DNS domain, which is indicative of a link farm or SEO abuse tactic. The ML classifier also flagged this PDF as malicious with high confidence. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/8093093090091095/The-Elf-off-the-Shelf-A-Christmas-Tradition-Gone-Bad-by-Horace-the-Elf.pdf
    • http://loaminoo.linkpc.net/3098095092094097/The-Christmas-Pickle-Tradition-by-Tammy-Lee-Dwyer.pdf
    • http://loaminoo.linkpc.net/4098093092092099/The-Epistles-of-Horace-Bilingual-Edition-by-Horace.pdf
    • http://loaminoo.linkpc.net/8093092099099090/The-Odes-and-Carmen-Saeculare-of-Horace-by-Horace.pdf
    • http://loaminoo.linkpc.net/8093092099098095/Horace-Odes-And-Epodes-by-Horace.pdf
    • http://loaminoo.linkpc.net/8093092098098098/The-Complete-Works-of-Horace-by-Horace.pdf
    • http://loaminoo.linkpc.net/8093092098098097/The-Works-of-Horace-by-Horace.pdf
    • http://loaminoo.linkpc.net/8093092098092091/The-Odes-of-Horace-by-Horace.pdf
    • http://loaminoo.linkpc.net/6090097096095099/The-Humanistic-Tradition-Prehistory-to-the-Early-Modern-World-The-Humanistic-Tradition-1-by-Gloria-K-Fiero.pdf
    • http://loaminoo.linkpc.net/3097093092091095/Christmas-Proposals-Her-Christmas-Romeo-The-Tycoon-s-Christmas-Engagement-A-Bride-for-Christmas-by-Carole-Mortimer.pdf
    • http://loaminoo.linkpc.net/1090099095097098/Continental-Shelf-by-Fred-D-39-Aguiar.pdf
    • http://loaminoo.linkpc.net/7099095093090099/The-Shelf-Elf-by-Jackie-Mims-Hopkins.pdf
    • http://loaminoo.linkpc.net/5095097093097099/Alice-On-The-Shelf-by-Bill-Gauthier.pdf
    • http://loaminoo.linkpc.net/1094099097093095/The-Shelf-Life-of-Happiness-by-David-Machado.pdf
    • http://loaminoo.linkpc.net/2094097096099098/Shelf-Life-The-Publicist-2-by-Christina-George.pdf
    • http://loaminoo.linkpc.net/8093090094096090/Foraminifera-of-the-Orinoco-Trinidad-Paria-Shelf-by-J-P-H-Kaasschieter.pdf
    • http://loaminoo.linkpc.net/2094096096090090/Shelf-Life-Crestlane-County-1-by-Stephanie-Lawton.pdf
    • http://loaminoo.linkpc.net/2099098090094095/The-Shelf-From-LEQ-to-LES-Adventures-in-Extreme-Reading-by-Phyllis-Rose.pdf
    • http://loaminoo.linkpc.net/4096099096090090/Murder-on-the-Half-Shelf-Booktown-Mystery-6-by-Lorna-Barrett.pdf
    • http://loaminoo.linkpc.net/2092095091092099/A-Bride-By-Christmas-Home-For-Christmas-The-Wise-Virgin-Tumbleweed-Christmas-by-Heather-Graham.pdf
    • http://loaminoo.linkpc.net/3097093092091095/Christmas-Proposals-Her-Christmas-Romeo-The-Tycoon-s-Christmas-Engagement-A-Bride-for-Christmas-by-Carole-Morti

Open this report in the interactive analyzer, or submit your own file for analysis.