Malicious PDF — malware analysis report

Static analysis result for SHA-256 f7fbfec02b1fe673…

MALICIOUS

PDF

13.3 KB Created: 2019-04-30 05:31:51 +01:00 Authoring application: mPDF 5.7
MD5: e68b9c2d13712c043612d2716d458825 SHA-1: d7ef5a1f05f657cba0a7a196de0cf933601cb77f SHA-256: f7fbfec02b1fe67364df24e8216458f600cef5e90d76a64b96fb4633cc765803
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF contains a large number of embedded links to external PDF files, a technique often used for SEO poisoning or to distribute malicious content. The ML classifier strongly indicated maliciousness. The primary attack pattern involves directing users to a link farm, likely to host further malicious content or phishing pages.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9877

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/4091092090098093/My-Neighbor-Seki-Vol-1-by-Takuma-Morishige.pdf
    • http://loaminoo.linkpc.net/3090090095090093/The-Neighbor-Experiment-by-Mr-X.pdf
    • http://loaminoo.linkpc.net/1096091094/The-Good-Neighbor-by-A-J-Banner.pdf
    • http://loaminoo.linkpc.net/2094099095091091/The-Jewish-Neighbor-by-A-M-Khalifa.pdf
    • http://loaminoo.linkpc.net/9095099097096098/Loving-My-Neighbor-by-C-M-Steele.pdf
    • http://loaminoo.linkpc.net/5098095092092097/Thy-Neighbor-by-Norah-Vincent.pdf
    • http://loaminoo.linkpc.net/2094094099092096/Caught-By-His-Neighbor-by-Fiona-Piper.pdf
    • http://loaminoo.linkpc.net/1092098098093098/Lick-Your-Neighbor-by-Chris-Genoa.pdf
    • http://loaminoo.linkpc.net/2096096096098091/The-Nosy-Neighbor-by-Fern-Michaels.pdf
    • http://loaminoo.linkpc.net/3098091094/Neighbor-Dearest-by-Penelope-Ward.pdf
    • http://loaminoo.linkpc.net/3093097092090/Playing-for-Keeps-Neighbor-from-Hell-1-by-R-L-Mathewson.pdf
    • http://loaminoo.linkpc.net/5097093097090/Come-Find-Me-by-Travis-Neighbor-Ward.pdf
    • http://loaminoo.linkpc.net/4090094094090097/My-Neighbor-Totoro-2-by-Hayao-Miyazaki.pdf
    • http://loaminoo.linkpc.net/3093097096093091/Playing-for-Keeps-Neighbor-from-Hell-1-by-R-L-Mathewson.pdf
    • http://loaminoo.linkpc.net/3095095090095099/Thy-Neighbor-s-Wife-by-Georgia-Beers.pdf
    • http://loaminoo.linkpc.net/2090099094097/Loving-Thy-Neighbor-by-Ruth-Scofield.pdf
    • http://loaminoo.linkpc.net/3095093095096093/The-Neighbor-The-City-0-5-by-Dean-Koontz.pdf
    • http://loaminoo.linkpc.net/1097096098097096/Truce-Neighbor-from-Hell-4-by-R-L-Mathewson.pdf
    • http://loaminoo.linkpc.net/1092090094091096/The-Game-Plan-Neighbor-from-Hell-5-by-R-L-Mathewson.pdf
    • http://loaminoo.linkpc.net/5095095092092096/Qualcosa-di-grande-Neighbor-from-Hell-5-by-R-L-Mathewson.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.