Malicious PDF — malware analysis report

Static analysis result for SHA-256 f1ef53142ef73790…

MALICIOUS

PDF

15.1 KB Created: 2019-05-02 01:48:03 +01:00 Authoring application: mPDF 5.7
MD5: c807075e0aee610c5cc911b7e3d1778c SHA-1: e0547ee6ad24b6782a053973e976de8c71d31e66 SHA-256: f1ef53142ef73790a1d365a7471013a5a02d576a78d2c830bad93367d7e75c0a
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF document contains a large number of embedded external links, as indicated by the PDF_SEO_LINK_FARM heuristic. The ML_NYX_PDF_MALICIOUS classifier also flagged this file with high confidence. While the document body text is heavily corrupted, the presence of numerous links suggests a malicious intent, possibly for SEO manipulation or to redirect users to malicious content. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9891

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/2099096091098093/A-Cap-for-Kathy-A-Kathy-Martin-Story-Kathy-Martin-1-by-Josephine-James.pdf
    • http://loaminoo.linkpc.net/2095099098098/Skein-and-Bone-by-V-H-Leslie.pdf
    • http://loaminoo.linkpc.net/2093093092097096/One-Skein-by-Leigh-Radford.pdf
    • http://loaminoo.linkpc.net/1091096091093092/Don-t-Ever-Tell-Kathy-s-Story-A-True-Tale-of-a-Childhood-Destroyed-by-Neglect-and-Fear-by-Kathy-O-39-Beirne.pdf
    • http://loaminoo.linkpc.net/3099091099094090/The-Skein-of-Lament-Braided-Path-2-by-Chris-Wooding.pdf
    • http://loaminoo.linkpc.net/9090097096095096/One-Skein-Wonders-for-Babies-101-Knitting-Projects-for-Infants-Toddlers-by-Judith-Durant.pdf
    • http://loaminoo.linkpc.net/5098099097095/Mike-Nelson-s-Mind-over-Matters-by-Michael-J-Nelson.pdf
    • http://loaminoo.linkpc.net/7094094097097092/Kathy-Goes-To-Haiti-by-Kathy-Acker.pdf
    • http://loaminoo.linkpc.net/1091093093098091090/Daily-Inspiration-From-Kathy-Henn-Positive-Feelings-Series-Book-1-by-Kathy-Henn.pdf
    • http://loaminoo.linkpc.net/1091093093098094092/Daily-Inspiration-From-Kathy-Henn-Positive-Feelings-Book-4-by-Kathy-Henn.pdf
    • http://loaminoo.linkpc.net/4094093094098/Official-Book-Club-Selection-A-Memoir-According-to-Kathy-Griffin-by-Kathy-Griffin.pdf
    • http://loaminoo.linkpc.net/9096098096091/The-Au-Pair-by-Eva-Goldsby.pdf
    • http://loaminoo.linkpc.net/8097096098092095/One-Is-Not-a-Pair-by-Britta-Teckentrup.pdf
    • http://loaminoo.linkpc.net/1098098093097090/An-Au-Pair-and-a-Millionaire-by-Eva-Goldsby.pdf
    • http://loaminoo.linkpc.net/8097096097095092/Where-s-the-Pair-by-Britta-Teckentrup.pdf
    • http://loaminoo.linkpc.net/1095091090098092/The-Pair-of-Shoes-by-Aline-Glasgow.pdf
    • http://loaminoo.linkpc.net/7099090090094095/A-Pair-of-Socks-by-Stuart-J-Murphy.pdf
    • http://loaminoo.linkpc.net/7099090090094093/Au-pair-i-New-York-by-Emma-McLaughlin.pdf
    • http://loaminoo.linkpc.net/2098098099094091/One-Pair-of-Hands-by-Monica-Dickens.pdf
    • http://loaminoo.linkpc.net/5096094094090092/And-God-Created-the-Au-Pair-by-Benedicte-Newland.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.