Malicious PDF — malware analysis report

Static analysis result for SHA-256 fcbdfc40a02aaefa…

MALICIOUS

PDF

12.7 KB Created: 2019-05-07 04:07:45 +01:00 Authoring application: mPDF 5.7
MD5: dce4c2dbf10be36b81bca885cfdd2049 SHA-1: 6291907af4c092e41f6d1371d129384407001d03 SHA-256: fcbdfc40a02aaefa6b5ec71ee8149fe63713e571afb099ec31aed638f1c1d352
90 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell

The PDF file was flagged by a machine learning classifier as malicious. Static analysis revealed a large number of embedded external links, a technique often used for SEO poisoning or to redirect users to malicious websites. The primary heuristic identified a 'PDF_SEO_LINK_FARM' with numerous numeric-slugged URLs pointing to the 'loaminoo.linkpc.net' domain. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.8780

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.n
    • http://loaminoo.linkpc.net/5094092090093091/Char-Black-Reapers-MC-4-by-Jade-Kuzma.pdf
    • http://loaminoo.linkpc.net/3099095091090/The-Reapers-are-the-Angels-Reapers-1-by-Alden-Bell.pdf
    • http://loaminoo.linkpc.net/4098093099094093/The-Reapers-Are-the-Angels-Reapers-1-by-Alden-Bell.pdf
    • http://loaminoo.linkpc.net/3098098098096093/Black-Jaguar-Green-Jade-by-Sylvia-L-Andrews.pdf
    • http://loaminoo.linkpc.net/5094091099097092/Poems-of-Rene-Char-by-Ren-Char.pdf
    • http://loaminoo.linkpc.net/2091092091092094/The-Color-of-Jade-Jade-1-by-Mae-Redding.pdf
    • http://loaminoo.linkpc.net/5099091091098094/Char-Leclerc-by-M-P-Robinson.pdf
    • http://loaminoo.linkpc.net/3098090090093092/Promises-To-Keep-by-Char-Chaffin.pdf
    • http://loaminoo.linkpc.net/4099096094090098/The-Word-as-Archipelago-by-Ren-Char.pdf
    • http://loaminoo.linkpc.net/5094092090097096/All-I-Want-For-Christmas-Is-A-Soulmate-by-Char-Chaffin.pdf
    • http://loaminoo.linkpc.net/5094092090097090/Exploration-The-Gifted-2-by-Char-Webster.pdf
    • http://loaminoo.linkpc.net/5094092090092099/Char-s-Webb-by-Kathleen-Downes.pdf
    • http://loaminoo.linkpc.net/5094091099096098/Selected-Poems-by-Ren-Char.pdf
    • http://loaminoo.linkpc.net/9090092096096/Leaves-of-Hypnos-by-Ren-Char.pdf
    • http://loaminoo.linkpc.net/5094092090096090/Char-Broil-s-Everybody-Grills-by-Lisa-Kahn.pdf
    • http://loaminoo.linkpc.net/5093091094096/The-Library-at-Mount-Char-by-Scott-Hawkins.pdf
    • http://loaminoo.linkpc.net/5094091099096095/Grace-for-the-Char-Baked-by-Lisa-Buffaloe.pdf
    • http://loaminoo.linkpc.net/2090097096090093/The-Library-at-Mount-Char-by-Scott-Hawkins.pdf
    • http://loaminoo.linkpc.net/1097097098090090/Reapers-with-Issues-by-H-E-Ellis.pdf
    • http://loaminoo.linkpc.net/5092097094092/The-Reapers-The-Hunted-1-by-Ali-Winters.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.