Malicious PDF — malware analysis report

Static analysis result for SHA-256 fb70d02dd99671da…

MALICIOUS

PDF

30.7 KB Created: 2019-05-02 19:33:47 +01:00 Authoring application: mPDF 5.7
MD5: 337293b13535906cc0323ca17e0f6724 SHA-1: 01de302696d8a0711e153517f12059b55dbbf193 SHA-256: fb70d02dd99671dac19a2e52d4285bfdd1b0551398bc9306a60f3b856598d57f
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF contains a large number of external links, identified by the PDF_SEO_LINK_FARM heuristic. The ML classifier also flagged this PDF as malicious with high confidence. While no scripts were extracted, the embedded URLs suggest a link farm or distribution point for further malicious content. The primary attack pattern appears to be SEO manipulation or a lure for malicious downloads.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9885

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/2095096099090098/The-Shaping-of-America-A-Geographical-Perspective-on-500-Years-of-History-Volume-1-Atlantic-America-1492-1800-by-D-W-Meinig.pdf
    • http://loaminoo.linkpc.net/3098091099097090/The-Geographical-History-of-America-Or-the-Relation-of-Human-Nature-to-the-Human-Mind-by-Gertrude-Stein.pdf
    • http://loaminoo.linkpc.net/1090093096092099090/South-America-and-Central-America-A-Natural-History-by-Jean-Dorst.pdf
    • http://loaminoo.linkpc.net/5099095098098096/The-Colonization-of-North-America-1492-1783-by-Herbert-Eugene-Bolton.pdf
    • http://loaminoo.linkpc.net/1091093097099099098/The-Birth-of-Motocross-An-Illustrated-History-of-the-Early-Years-of-America-s-1-Dirt-Sport---The-Tracks---The-Riders---The-Machines-by-Robert-Schleichert.pdf
    • http://loaminoo.linkpc.net/1090098093090099093/Colonial-America-in-an-Atlantic-World-by-T-H-Breen.pdf
    • http://loaminoo.linkpc.net/3097090097097095/Our-Country-The-Shaping-of-America-from-Roosevelt-to-Reagan-by-Michael-Barone.pdf
    • http://loaminoo.linkpc.net/7096094098097098/The-Outfit-The-Role-of-Chicago-s-Underworld-in-the-Shaping-of-Modern-America-by-Gus-Russo.pdf
    • http://loaminoo.linkpc.net/5091097096091090/For-All-These-Rights-Business-Labor-and-the-Shaping-of-America-s-Public-Private-Welfare-State-by-Jennifer-Klein.pdf
    • http://loaminoo.linkpc.net/1090097096099099092/The-East-And-The-Mid-Atlantic-Art-Across-America-Two-Centuries-Of-Regional-Painting-1710-1920-by-William-H-Gerdts.pdf
    • http://loaminoo.linkpc.net/1096091097090/Justice-Oliver-Wendell-Holmes-Volume-I-the-Shaping-Years-1841-1870-by-M-A-DeWolfe-Howe.pdf
    • http://loaminoo.linkpc.net/2095096095097090/A-Magnificent-Catastrophe-The-Tumultuous-Election-of-1800-America-s-First-Presidential-Campaign-by-Edward-J-Larson.pdf
    • http://loaminoo.linkpc.net/1090090094099096095/Bundle-World-History-Volume-I-To-1800-Loose-leaf-Version-8th-LMS-Integrated-for-MindTap-History-1-term-6-months-Printed-Access-Card-by-William-J-Duiker.pdf
    • http://loaminoo.linkpc.net/1090097096097094092/Aaron-Copland-s-America-A-Cultural-Perspective-by-William-Gerdts.pdf
    • http://loaminoo.linkpc.net/5091097090098090/New-Netherland-Connections-Intimate-Networks-and-Atlantic-Ties-in-Seventeenth-Century-America-by-Susanah-Shaw-Romney.pdf
    • http://loaminoo.linkpc.net/7095090093090098/Travels-Through-That-Part-of-North-America-Formerly-Called-Louisiana-Vol-2-Illustrated-with-Notes-Relative-Chiefly-to-Natural-History-To-Which-Is-Added-by-the-Translator-a-Systematic-Catalogue-of-All-the-Known-Plants-of-English-North-America-or-a-Flo-by-Bossu-Bossu.pdf
    • http://loaminoo.linkpc.net/2092091093092095/Late-Cainozoic-Floras-Of-Iceland-15-Million-Years-Of-Vegetation-And-Climate-History-In-The-Northern-North-Atlantic-by-Thomas-Denk.pdf
    • http://loaminoo.linkpc.net/1098095094099092/The-Last-Fish-Tale-The-Fate-of-the-Atlantic-amp-Survival-in-Gloucester-America-s-Oldest-Fishing-Port-amp-Most-Original-Town-by-Mark-Kurlansky.pdf
    • http://loaminoo.linkpc.net/9098099092097091/Captain-America-The-Death-of-Captain-America-Volume-1-The-Death-of-the-Dream-by-Ed-Brubaker.pdf
    • http://loaminoo.linkpc.net/3093091094091/Al-America-Travels-Through-America-s-Arab-and-Islamic-Roots-by-Jonathan-Curiel.pdf
    • http://loaminoo.linkpc.net/1091093097099099098/The-Birth-of-Motocross-An-Illustrated-History-

Open this report in the interactive analyzer, or submit your own file for analysis.