Malicious PDF — malware analysis report

Static analysis result for SHA-256 f29b962eaa07bdec…

MALICIOUS

PDF

15.8 KB Created: 2019-04-30 04:09:01 +01:00 Authoring application: mPDF 5.7
MD5: 20034cfef196ea2324c523179fb95264 SHA-1: 8015b880c70ea2f7cf5a91c4171d9a5333248bf5 SHA-256: f29b962eaa07bdec989d1d4827e6c06c58248590c9a6405184f9a316bdaa4e78
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF file contains a large number of embedded external links, identified by the PDF_SEO_LINK_FARM heuristic. The ML_NYX_PDF_MALICIOUS classifier also flagged this file with high confidence. While the URLs themselves are marked as benign, the sheer volume and structure suggest a malicious intent, likely for SEO spam or to redirect users to potentially harmful content. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9892

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.li
    • http://loaminoo.linkpc.net/3096097099093092/The-Wolf-s-Mating-Season-by-Sierra-Wolf.pdf
    • http://loaminoo.linkpc.net/4092097095096099/New-Scotia-Pack-Box-Set-Shield-Wolf-Wolf-Lover-Fire-Wolf-by-Victoria-Danann.pdf
    • http://loaminoo.linkpc.net/2093092094099096/Mating-Games-Delta-Wolf-2-by-Stormy-Glenn.pdf
    • http://loaminoo.linkpc.net/1098091094/Wolf-by-Wolf-Wolf-by-Wolf-1-by-Ryan-Graudin.pdf
    • http://loaminoo.linkpc.net/6092096094090096/Wolf-Erlbruchs-Kinderzimmer-Kalender-2015-Geschwister-by-Wolf-Erlbruch.pdf
    • http://loaminoo.linkpc.net/4098091092096096/SEAL-Wolf-In-Too-Deep-Heart-of-the-Wolf-18-by-Terry-Spear.pdf
    • http://loaminoo.linkpc.net/5097092090093/My-Wolf-Protector-Wolf-Town-Guardians-2-by-Rose-Wynters.pdf
    • http://loaminoo.linkpc.net/1092093095097097/My-Wolf-Protector-Wolf-Town-Guardians-2-by-Rose-Wynters.pdf
    • http://loaminoo.linkpc.net/5097096093095096/Big-Wolf-and-Little-Wolf-Such-a-Beautiful-Orange-by-Nadine-Brun-Cosme.pdf
    • http://loaminoo.linkpc.net/1094096099092091/My-Wolf-Cowboy-Wolf-Town-Guardians-3-by-Rose-Wynters.pdf
    • http://loaminoo.linkpc.net/1091093099098090090/Her-Wolf-Her-Protector-Claimed-and-Bred-by-the-Wolf-1-by-Elixa-Everett.pdf
    • http://loaminoo.linkpc.net/1097097096099099/A-Seal-in-Wolf-s-Clothing-Heart-of-the-Wolf-9-by-Terry-Spear.pdf
    • http://loaminoo.linkpc.net/1091095092091099/The-Big-Bad-Wolf-Romance-Compilation-The-Big-Bad-Wolf-1-4-by-Heather-Killough-Walden.pdf
    • http://loaminoo.linkpc.net/2099092092094092/Seduced-by-the-Wolf-Heart-of-the-Wolf-5-by-Terry-Spear.pdf
    • http://loaminoo.linkpc.net/1097094099094094/The-Witch-Who-Cried-Wolf-Cry-Wolf-1-by-Sarah-M-kel-.pdf
    • http://loaminoo.linkpc.net/5093092091095092/Wolf-Curves-Wolf-Clan-1-by-Christa-Wick.pdf
    • http://loaminoo.linkpc.net/7093099097092/Destiny-of-the-Wolf-Heart-of-the-Wolf-2-by-Terry-Spear.pdf
    • http://loaminoo.linkpc.net/8098098093090098/Wolf-in-Kunst-Und-Literatur-Der-Wolfsjunge-Rotkappchen-Kami-to-K-Shinry-Der-Mit-Dem-Wolf-Tanzt-Asena-Legende-Der-Wolfsmensch-by-Quelle-Wikipedia.pdf
    • http://loaminoo.linkpc.net/1091098098090096/Wolf-Spell-Wolf-Trilogy-1-by-M-R-Polish.pdf
    • http://loaminoo.linkpc.net/1092098094091094/Pale-Wolf-Bad-Wolf-Chronicles-2-by-Tim-McGregor.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.