Malicious PDF — malware analysis report

Static analysis result for SHA-256 f80aa7109f0b36dc…

MALICIOUS

PDF

15.0 KB Created: 2019-04-30 18:42:36 +01:00 Authoring application: mPDF 5.7
MD5: f46b694c51ecf06ad1945aabc6caad69 SHA-1: b9ab5e435723fdf106d659e1a02f92ea859cde2b SHA-256: f80aa7109f0b36dca10fd067cc859ff3f353ca30817d103a4f2739066ae7ded1
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF contains a large number of embedded URLs, identified by the PDF_SEO_LINK_FARM heuristic. These URLs point to external domains, suggesting a link farm or a method to distribute malicious content. The ML classifier also flagged this PDF as malicious with high confidence. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9891

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/8092095099/Sweet-Black-Waves-Sweet-Black-Waves-1-by-Kristina-P-rez.pdf
    • http://loaminoo.linkpc.net/9095098093091/Heart-Waves-Heart-Waves-1-by-Danielle-Sibarium.pdf
    • http://loaminoo.linkpc.net/2093093097098098/Waves-of-Mercy-Waves-of-Mercy-1-by-Lynn-Austin.pdf
    • http://loaminoo.linkpc.net/2091093093092094/Making-Waves-Making-Waves-1-by-Katherine-Applegate.pdf
    • http://loaminoo.linkpc.net/3094095094097098/The-Sweet-Hell-Inside-The-Rise-of-an-Elite-Black-Family-in-the-Segregated-South-by-Edward-Ball.pdf
    • http://loaminoo.linkpc.net/2092093091/Sweet-Soul-Sweet-Home-4-Carillo-Boys-3-by-Tillie-Cole.pdf
    • http://loaminoo.linkpc.net/5091098093099/Summer-s-Sweet-Embrace-A-Sweet-Romance-Anthology-by-Kim-Strattford.pdf
    • http://loaminoo.linkpc.net/3098097096090093/Sweet-Vengeance-Jessica-Sweet-Trilogy-1-by-Aliya-DalRae.pdf
    • http://loaminoo.linkpc.net/8092094097092096/Sweet-Secrets-Sweet-Cove-Cozy-Mystery-3-by-J-A-Whiting.pdf
    • http://loaminoo.linkpc.net/3093098094091096/Sweet-Reckoning-The-Sweet-Trilogy-3-by-Wendy-Higgins.pdf
    • http://loaminoo.linkpc.net/1098097093096099/Sweet-Evil-The-Sweet-Trilogy-1-by-Wendy-Higgins.pdf
    • http://loaminoo.linkpc.net/2095096093094093/Sweet-Rome-Sweet-Home-1-5-by-Tillie-Cole.pdf
    • http://loaminoo.linkpc.net/3093093091091099/Sweet-Evil-The-Sweet-Trilogy-1-by-Wendy-Higgins.pdf
    • http://loaminoo.linkpc.net/4094093092097095/Sweet-Surprise-Sweet-Texas-4-by-Candis-Terry.pdf
    • http://loaminoo.linkpc.net/3098091096098/Sweet-Rome-Sweet-Home-1-5-by-Tillie-Cole.pdf
    • http://loaminoo.linkpc.net/2091097092097090/Sweet-Tea-at-Sunrise-The-Sweet-Magnolias-6-by-Sherryl-Woods.pdf
    • http://loaminoo.linkpc.net/1094098098090093/Sweet-Little-Lies-Sweet-2-by-Abbi-Glines.pdf
    • http://loaminoo.linkpc.net/3096096094096093/Sweet-Sweet-Savannah-Still-Water-Pub-1-by-H-L-Nighbor.pdf
    • http://loaminoo.linkpc.net/8091092095097/Sweet-Surrender-Sweet-1-by-Maya-Banks.pdf
    • http://loaminoo.linkpc.net/7099093090099/Sweet-Possession-Sweet-5-by-Maya-Banks.pdf
    • http://loaminoo.linkpc.net/5091098

Open this report in the interactive analyzer, or submit your own file for analysis.