Malicious PDF — malware analysis report

Static analysis result for SHA-256 f71b18d491c5e197…

MALICIOUS

PDF

18.2 KB Created: 2019-05-01 20:07:13 +01:00 Authoring application: mPDF 5.7 First seen: 2021-04-01
MD5: 0c982143aabc4a2f8066f64506653728 SHA-1: 36527120c6d9b059dfcd780c0998b66a6e1b145f SHA-256: f71b18d491c5e197976e94cf9107ce1b6b53860eb70ee0d68132ca7a07da92c4
92 Risk Score

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/5096094096093090/Freaky-Tuesday-Camp-Confidential-17-by-Melissa-J-Morgan.pdf In PDF document text
    • http://loaminoo.linkpc.net/5096094096092095/Falling-in-Like-Camp-Confidential-11-by-Melissa-J-Morgan.pdfIn PDF document text
    • http://loaminoo.linkpc.net/5096094096099091/Wish-You-Weren-t-Here-Camp-Confidential-8-by-Melissa-J-Morgan.pdfIn PDF document text
    • http://loaminoo.linkpc.net/5096094097095093/Politically-Incorrect-Camp-Confidential-23-by-Melissa-J-Morgan.pdfIn PDF document text
    • http://loaminoo.linkpc.net/5096094095095092/Alex-s-Challenge-Camp-Confidential-4-by-Melissa-J-Morgan.pdfIn PDF document text
    • http://loaminoo.linkpc.net/5096094096093094/Second-Time-s-the-Charm-Camp-Confidential-7-by-Melissa-J-Morgan.pdfIn PDF document text
    • http://loaminoo.linkpc.net/5096094096092091/Winter-Games-Camp-Confidential-12-by-Melissa-J-Morgan.pdfIn PDF document text
    • http://loaminoo.linkpc.net/5096094096092098/Golden-Girls-Camp-Confidential-16-by-Melissa-J-Morgan.pdfIn PDF document text
    • http://loaminoo.linkpc.net/5098098095093097/Bonding-Camp-Volume-1-Bonding-Camp-Morgan-s-Protege-by-Christelle-Mirin.pdfIn PDF document text
    • http://loaminoo.linkpc.net/3093094096092093/Joan-Rivers-Confidential-The-Unseen-Scrapbooks-Joke-Cards-Personal-Files-and-Photos-of-a-Very-Funny-Woman-Who-Kept-Everything-by-Melissa-Rivers.pdfIn PDF document text
    • http://loaminoo.linkpc.net/4095092095091097/Treblinka-Transit-Camp-or-Extermination-Camp-by-Carlo-Mattogno.pdfIn PDF document text
    • http://loaminoo.linkpc.net/2091092095097097/Freaky-Monday-by-Mary-Rodgers.pdfIn PDF document text
    • http://loaminoo.linkpc.net/1098090092098096/Camp-Payback-Camp-Boyfriend-2-by-J-K-Rock.pdfIn PDF document text
    • http://loaminoo.linkpc.net/2098094095096095/Freaky-Lies-A-Mystic-Caravan-Mystery-2-by-Amanda-M-Lee.pdfIn PDF document text
    • http://loaminoo.linkpc.net/2097096092097096/Goddamned-Freaky-Monsters-The-Tome-of-Bill-5-by-Rick-Gualtieri.pdfIn PDF document text
    • http://loaminoo.linkpc.net/1091092098095099090/Illustrated-Catalogue-of-the-de-Camp-Levoy-and-Co-Wholesale-Manufacturers-of-Saddlery-Harness-and-Collars-of-Every-Decription-by-De-Camp-Levoy-and-Company.pdfIn PDF document text
    • http://loaminoo.linkpc.net/3091092097090095/My-Best-Friend-Is-a-Secret-Agent-How-Chip-Became-C-H-I-P-and-Foiled-the-Freaky-Fuzzy-Invasion-by-Richard-Clark.pdfIn PDF document text
    • http://loaminoo.linkpc.net/4092091091094093/Melissa-Explains-It-All-Tales-from-My-Abnormally-Normal-Life-by-Melissa-Joan-Hart.pdfIn PDF document text
    • http://loaminoo.linkpc.net/4092095099091094/Morgan-s-Return-Morgan-Selwood-2-by-Greta-van-der-Rol.pdfIn PDF document text
    • http://loaminoo.linkpc.net/4091095095093/Tuesday-by-David-Wiesner.pdfIn PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.