Malicious PDF — malware analysis report

Static analysis result for SHA-256 f563b0d0eb9e188c…

MALICIOUS

PDF

19.3 KB Created: 2019-04-30 17:23:04 +01:00 Authoring application: mPDF 5.7
MD5: f79d6196c5eb773c29398088379a478c SHA-1: d75ff62b6360f4c02e2a7f59bbebd00986702c5c SHA-256: f563b0d0eb9e188cc3b7787bdcacb741230f53bd5535b28f5767b76d87e80741
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF contains a large number of embedded links, identified by the PDF_SEO_LINK_FARM heuristic. The ML classifier also flagged this PDF as malicious with high confidence. The embedded links, while labeled as confirmed benign in the provided data, are structured in a way that suggests a link farm or a method to distribute further malicious content. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9920

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/2095094099093098/The-Big-Box-by-Toni-Morrison.pdf
    • http://loaminoo.linkpc.net/6097097093099/Love-by-Toni-Morrison.pdf
    • http://loaminoo.linkpc.net/2091093097091/The-Bluest-Eye-by-Toni-Morrison.pdf
    • http://loaminoo.linkpc.net/3091093098097094/The-Bluest-Eye-by-Toni-Morrison.pdf
    • http://loaminoo.linkpc.net/4098095093091096/A-Mercy-by-Toni-Morrison.pdf
    • http://loaminoo.linkpc.net/4092092095096/Jazz-by-Toni-Morrison.pdf
    • http://loaminoo.linkpc.net/8092092094091096/The-Bluest-Eye-by-Toni-Morrison.pdf
    • http://loaminoo.linkpc.net/2095091098090092/The-Origin-of-Others-by-Toni-Morrison.pdf
    • http://loaminoo.linkpc.net/2098094095092092/The-Bluest-Eye-by-Toni-Morrison.pdf
    • http://loaminoo.linkpc.net/2094091096092095/Please-Louise-by-Toni-Morrison.pdf
    • http://loaminoo.linkpc.net/2097091098092091/Song-of-Solomon-by-Toni-Morrison.pdf
    • http://loaminoo.linkpc.net/2097091092093096/Recitatif-To-Room-Nineteen-by-Toni-Morrison.pdf
    • http://loaminoo.linkpc.net/7095099091098092/The-Nobel-Lecture-In-Literature-1993-by-Toni-Morrison.pdf
    • http://loaminoo.linkpc.net/7090098092090094/An-Ethics-Of-Reading-The-Broken-Beauties-Of-Toni-Morrison-Nawal-El-Saadawi-And-Arundhati-Roy-by-Kathleen-A-Kremins.pdf
    • http://loaminoo.linkpc.net/8092094090098091/Towards-a-Reading-of-Toni-Morrison-s-Fiction-African-American-History-the-Arts-and-Contemporary-Theory-by-Aicha-Chapi.pdf
    • http://loaminoo.linkpc.net/4097090091098095/Imagining-Characters-Six-Conversations-About-Women-Writers-Jane-Austen-Charlotte-Bronte-George-Eliot-Willa-Cather-Iris-Murdoch-and-Toni-Morrison-by-A-S-Byatt.pdf
    • http://loaminoo.linkpc.net/8094095092097094/Focus-On-60-Most-Popular-African-American-Catholics-Kobe-Bryant-Lil-Wayne-Sean-Combs-Clarence-Thomas-Billie-Holiday-Vanessa-Williams-Chaka-Khan-Al-Roker-Robin-Givens-Toni-Morrison-etc-by-Wikipedia-contributors.pdf
    • http://loaminoo.linkpc.net/2095093099094/Beloved-Stranger-Beloved-Trilogy-2-by-Patricia-Potter.pdf
    • http://loaminoo.linkpc.net/3097090098095090/The-Well-Beloved-with-The-Pursuit-of-the-Well-Beloved-by-Thomas-Hardy.pdf
    • http://loaminoo.linkpc.net/8091099090095/New-X-Men-by-Grant-Morrison-Ultimate-Collection-Book-1-by-Grant-Morrison.pdf
    • http://loaminoo.linkpc.net/7090098092090094/An-Ethics-Of-Reading-The-Broken-Beauties-Of-Toni-Morrison-Nawal-El-Saadawi-And-Arundhati

Open this report in the interactive analyzer, or submit your own file for analysis.