Malicious PDF — malware analysis report

Static analysis result for SHA-256 fa4fe35cd38dec46…

MALICIOUS

PDF

19.4 KB Created: 2019-04-30 08:43:09 +01:00 Authoring application: mPDF 5.7
MD5: d519c213dc3f36d58a8b381313cec264 SHA-1: 4bffeb6876b2a84081a516ecfb4ca9e610736350 SHA-256: fa4fe35cd38dec466226b5af887e14dda32ee22335a9f51eeec9ab4efa17ec60
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious File

The PDF contains a large number of embedded URLs, identified by the PDF_SEO_LINK_FARM heuristic. While many of these URLs were individually classified as benign, the sheer volume and structure suggest a malicious intent, likely for SEO manipulation or to distribute further malware. The ML_NYX_PDF_MALICIOUS heuristic also flagged the document with high confidence. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9920

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/5091093097095095/Rise-Again-The-Story-of-Cape-Breton-Island-by-Robert-J-Morgan.pdf
    • http://loaminoo.linkpc.net/1090090090098092/J-B-McLachlan-A-Biography-The-Story-of-a-Legendary-Labour-Leader-and-the-Cape-Breton-Coal-Miners-by-David-Frank.pdf
    • http://loaminoo.linkpc.net/7090096097099091/My-Grandfather-s-Cape-Breton-by-Clive-Doucet.pdf
    • http://loaminoo.linkpc.net/8096094099096/The-Bishop-s-Man-The-Cape-Breton-Trilogy-2-by-Linden-MacIntyre.pdf
    • http://loaminoo.linkpc.net/1090095094095094092/Walks-and-Sketches-at-the-Cape-of-Good-Hope-To-Which-Is-Subjoined-a-Journey-from-Cape-Town-to-Blettenberg-s-Bay-by-Robert-Semple.pdf
    • http://loaminoo.linkpc.net/1090098090091093096/The-Blue-Mountains-and-Other-Gaelic-Stories-from-Cape-Breton-Na-Beanntaichean-Gorma-Agus-Sgeulachdan-Eile-Ceap-Breatainn-by-John-Shaw.pdf
    • http://loaminoo.linkpc.net/5096099093092099/Treasure-Island-A-Story-of-the-Spanish-Main-by-Robert-Louis-Stevenson.pdf
    • http://loaminoo.linkpc.net/3096094095096094/Rocket-Girl-The-Story-of-Mary-Sherman-Morgan-America-s-First-Female-Rocket-Scientist-by-George-D-Morgan.pdf
    • http://loaminoo.linkpc.net/4093095098097096/The-Other-Island-Morgan-Koda-3-by-Juls-Duncan.pdf
    • http://loaminoo.linkpc.net/1090099095092096095/Rise-of-the-Valiant-Kings-and-Sorcerers-2-by-Morgan-Rice.pdf
    • http://loaminoo.linkpc.net/3094097092090093/Some-Kind-of-Wonderful-Puffin-Island-2-by-Sarah-Morgan.pdf
    • http://loaminoo.linkpc.net/7099096098090099/Buster-s-Trip-to-Cape-Cod-A-Story-about-Massachusetts-by-Oona-Gaarder-Juntti.pdf
    • http://loaminoo.linkpc.net/3090097094091/The-House-of-Morgan-An-American-Banking-Dynasty-and-the-Rise-of-Modern-Finance-by-Ron-Chernow.pdf
    • http://loaminoo.linkpc.net/2098098090090099/This-Rock-by-Robert-Morgan.pdf
    • http://loaminoo.linkpc.net/2099091094095091/The-Mimic-Arc-Cape-High-Omnibus-2-Cape-High-5-7-by-R-J-Ross.pdf
    • http://loaminoo.linkpc.net/3097099098095091/Some-Things-Come-Back-by-Robert-Morgan.pdf
    • http://loaminoo.linkpc.net/2096095095096098/12-Stories-of-Christmas-by-Robert-J-Morgan.pdf
    • http://loaminoo.linkpc.net/2098098091092095/Brave-Enemies-by-Robert-Morgan.pdf
    • http://loaminoo.linkpc.net/2099094095098/The-Dark-Island-by-Robert-J-Conley.pdf
    • http://loaminoo.linkpc.net/5096094098093/Our-Island-Story-by-H-E-Marshall.pdf
    • http://loaminoo.linkpc.net/1090098090091093096/The-Blue-Mounta

Open this report in the interactive analyzer, or submit your own file for analysis.