Malicious PDF — malware analysis report

Static analysis result for SHA-256 f7f4a28607a5a978…

MALICIOUS

PDF

19.9 KB Created: 2019-05-04 13:58:34 +01:00 Authoring application: mPDF 5.7
MD5: 20fb06c3cbc71f906ae418a7f5a107eb SHA-1: 8e82093657b4bf345aa5a114a380925e3125423c SHA-256: f7f4a28607a5a9783a95b021920de5ce30496a7ed5477157bd884e9e8d586480
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1204.002 Malicious Link

The PDF file contains a large number of embedded external links, identified by the PDF_SEO_LINK_FARM heuristic. While many of these links point to benign content, the sheer volume and the nature of the heuristic suggest a malicious intent, possibly for SEO manipulation or to distribute further malicious payloads. The ML classifier also strongly indicated maliciousness. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9942

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/1090098092/Dork-Diaries-Book-8-Tales-from-a-Not-So-Happily-Ever-After-Dork-Diaries-8-by-Rachel-Ren-e-Russell.pdf
    • http://loaminoo.linkpc.net/1090099099/Dork-Diaries-Book-9-Tales-from-a-Not-So-Dorky-Drama-Queen-Dork-Diaries-9-by-Rachel-Ren-e-Russell.pdf
    • http://loaminoo.linkpc.net/4090096090093/Dork-Diaries-Book-2-Tales-from-a-Not-So-Popular-Party-Girl-Dork-Diaries-2-by-Rachel-Ren-e-Russell.pdf
    • http://loaminoo.linkpc.net/4090091095092/Dork-Diaries-Book-5-Tales-from-a-Not-So-Smart-Miss-Know-It-All-Dork-Diaries-5-by-Rachel-Ren-e-Russell.pdf
    • http://loaminoo.linkpc.net/9099092096/Dork-Diaries-Book-7-Tales-from-a-Not-So-Glam-TV-Star-Dork-Diaries-7-by-Rachel-Ren-e-Russell.pdf
    • http://loaminoo.linkpc.net/1099098090092091/Dork-Diaries-Book-10-Tales-from-a-Not-So-Perfect-Pet-Sitter-Dork-Diaries-10-by-Rachel-Ren-e-Russell.pdf
    • http://loaminoo.linkpc.net/2097098099097097/The-Dork-Diaries-Set-Dork-Diaries-Books-1-2-3-3-1-2-4-and-5-by-Rachel-Ren-e-Russell.pdf
    • http://loaminoo.linkpc.net/1092094093094091/TV-Star-Dork-Diaries-7-by-Rachel-Ren-e-Russell.pdf
    • http://loaminoo.linkpc.net/2097093095091099/Skating-Sensation-Dork-Diaries-4-by-Rachel-Ren-e-Russell.pdf
    • http://loaminoo.linkpc.net/8096090091095091/DORK-Diaries-Band-09-Nikkis-nicht-ganz-so-geheimes-Tagebuch-by-Rachel-Ren-e-Russell.pdf
    • http://loaminoo.linkpc.net/4091092095099/King-Dork-King-Dork-1-by-Frank-Portman.pdf
    • http://loaminoo.linkpc.net/9090093092097095/The-Vampire-Diaries---Stefan-s-Diaries---Rache-ist-nicht-The-Vampire-Diaries-3-by-L-J-Smith.pdf
    • http://loaminoo.linkpc.net/8093090094092094/Latin-America-Diaries-The-Sequel-to-The-Motorcycle-Diaries-by-Ernesto-Che-Guevara.pdf
    • http://loaminoo.linkpc.net/4097092093097/The-Asylum-The-Vampire-Diaries-Stefan-s-Diaries-5-by-L-J-Smith.pdf
    • http://loaminoo.linkpc.net/3098096093095/The-Craving-The-Vampire-Diaries-Stefan-s-Diaries-3-by-L-J-Smith.pdf
    • http://loaminoo.linkpc.net/3096095091090/Bloodlust-The-Vampire-Diaries-Stefan-s-Diaries-2-by-L-J-Smith.pdf
    • http://loaminoo.linkpc.net/2094096095092090/Tall-Dork-and-Handsome-by-Remy-Richard.pdf
    • http://loaminoo.linkpc.net/1092094099090090/The-Jewish-Daughter-Diaries-by-Rachel-Ament.pdf
    • http://loaminoo.linkpc.net/3091095094090096/Camp-Dork-Pack-of-Dorks-2-by-Beth-Vrabel.pdf
    • http://loaminoo.linkpc.net/6092090092095/The-Wiccan-Diaries-Neophyte-Adept-The-Wiccan-Diaries-Books-1-3-by-T-D-McMichael.pdf
    • http://loaminoo.linkpc.net/4090091095092/Dork-Diaries-Boo