Malicious PDF — malware analysis report

Static analysis result for SHA-256 e9e802c2d869436b…

MALICIOUS

PDF

16.7 KB Created: 2019-04-30 05:48:31 +01:00 Authoring application: mPDF 5.7
MD5: 9a0957ab56c7b47dae86f5818976b153 SHA-1: 2128a5e70e340c0f81b3d3d0312bb0b8a696e2d4 SHA-256: e9e802c2d869436b7eff60a7fa441c42f981d245392f7b8c9ca02d64390bb1ac
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF file was flagged by a machine learning classifier as malicious and contains a large number of embedded links. The heuristic 'PDF_SEO_LINK_FARM' indicates that these links likely lead to other PDF files hosted on the same domain, suggesting a link farm or redirection mechanism. While the document body is unreadable, the presence of numerous external links points towards a social engineering attack, potentially leading users to phishing sites or further malware downloads.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9913

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/3099098097097098/December-Heart-The-Silver-Foxes-of-Westminster-1-by-Merry-Farmer.pdf
    • http://loaminoo.linkpc.net/3099096091092091/The-Faithful-Heart-by-Merry-Farmer.pdf
    • http://loaminoo.linkpc.net/3099098090093091/In-Your-Arms-by-Merry-Farmer.pdf
    • http://loaminoo.linkpc.net/6094095096094099/Somebody-to-Love-by-Merry-Farmer.pdf
    • http://loaminoo.linkpc.net/6094095095098098/His-Bewildering-Bride-The-Brides-of-Paradise-Ranch-3-by-Merry-Farmer.pdf
    • http://loaminoo.linkpc.net/6094095096093096/His-Heartbroken-Bride-The-Brides-of-Paradise-Ranch-4-by-Merry-Farmer.pdf
    • http://loaminoo.linkpc.net/6094095096094091/Holly-The-Christmas-Bride-The-Brides-of-Paradise-Ranch-9-by-Merry-Farmer.pdf
    • http://loaminoo.linkpc.net/8099098096/One-Day-in-December-by-Josie-Silver.pdf
    • http://loaminoo.linkpc.net/3095092096093093/Trail-of-Kisses-Hot-on-the-Trail-1-by-Merry-Farmer.pdf
    • http://loaminoo.linkpc.net/3095092096093097/Trail-of-Hope-Hot-on-the-Trail-2-by-Merry-Farmer.pdf
    • http://loaminoo.linkpc.net/1091097091092092092/A-Merry-Heart-Brides-of-Lancaster-County-1-by-Wanda-E-Brunstetter.pdf
    • http://loaminoo.linkpc.net/1090094097091099/Little-House-in-the-Big-Woods-Farmer-Boy-Little-House-on-the-Prairie-On-the-Banks-of-Plum-Creek-By-the-Shores-of-Silver-Lake-Little-House-1-5-by-Laura-Ingalls-Wilder.pdf
    • http://loaminoo.linkpc.net/3098095092090090/Merry-Christmas-Merry-Crow-by-Kathi-Appelt.pdf
    • http://loaminoo.linkpc.net/8097095091098094/Light-of-My-Heart-Silver-Hills-Trilogy-1-by-Ginny-Aiken.pdf
    • http://loaminoo.linkpc.net/8094092094096/Millionaire-Chicken-Farmer-With-Just-One-Rooster-Three-Hens-and-50-She-Became-the-Wealthiest-Chicken-Farmer-in-Detroit-by-Francis-Okumu.pdf
    • http://loaminoo.linkpc.net/7097092096096092/Fannie-Farmer-s-book-of-good-dinners-by-Fannie-Merritt-Farmer.pdf
    • http://loaminoo.linkpc.net/4091090094095097/The-Westminster-Alice-by-Saki.pdf
    • http://loaminoo.linkpc.net/2090090095091091/Por-qu-me-cas-contigo-by-Irene-de-Westminster.pdf
    • http://loaminoo.linkpc.net/2099094091099097/Westminster-Abby-by-Micol-Ostow.pdf
    • http://loaminoo.linkpc.net/3091099094095092/Little-Foxes-by-Michael-Morpurgo.pdf
    • http://loaminoo.linkpc.net/1091097091092092092/A-Merry-Heart-Brides-of-Lancaster-Count

Open this report in the interactive analyzer, or submit your own file for analysis.