Malicious PDF — malware analysis report

Static analysis result for SHA-256 fe42d6459304d8ef…

MALICIOUS

PDF

14.8 KB Created: 2019-04-30 05:11:30 +01:00 Authoring application: mPDF 5.7
MD5: 1b57525d27c35165e80885191b63ee5c SHA-1: 64cac89671678785ec91afbce724643f0897a1be SHA-256: fe42d6459304d8ef5467e5e2e7085179c3b0edf7f8daee8dfaf43b515ee2078e
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF contains a large number of embedded external links, identified by the PDF_SEO_LINK_FARM heuristic. While many of these links point to book titles and are marked as benign, the sheer volume and the ML_NYX_PDF_MALICIOUS classification indicate a malicious intent, likely to manipulate search engine results or to serve as a distribution point for further malware. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9891

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/1095098093091091/The-Mitford-Murders-Mitford-Murders-1-by-Jessica-Fellowes.pdf
    • http://loaminoo.linkpc.net/7091090096095/Jan-Karon-s-Mitford-Cookbook-and-Kitchen-Reader-Recipes-from-Mitford-Cooks-Favorite-Tales-from-Mitford-Books-by-Jan-Karon.pdf
    • http://loaminoo.linkpc.net/3094094099094/At-Home-in-Mitford-Mitford-Years-1-by-Jan-Karon.pdf
    • http://loaminoo.linkpc.net/1093099097091096/The-American-Way-of-Death-by-Jessica-Mitford.pdf
    • http://loaminoo.linkpc.net/4095092099095093/The-American-Way-of-Birth-by-Jessica-Mitford.pdf
    • http://loaminoo.linkpc.net/1095096096098/Kind-and-Usual-Punishment-The-Prison-Business-by-Jessica-Mitford.pdf
    • http://loaminoo.linkpc.net/1094095096090092/Churchill-s-Rebels-Jessica-Mitford-amp-Esmond-Romilly-by-Meredith-Whitford.pdf
    • http://loaminoo.linkpc.net/4090095092093098/The-Storm-Murders-The-Storm-Murders-Trilogy-1-by-John-Farrow.pdf
    • http://loaminoo.linkpc.net/6095090096/To-Be-Where-You-Are-Mitford-Years-14-by-Jan-Karon.pdf
    • http://loaminoo.linkpc.net/4090099097098094/Pigeon-Pie-by-Nancy-Mitford.pdf
    • http://loaminoo.linkpc.net/9090094099095/The-Blessing-by-Nancy-Mitford.pdf
    • http://loaminoo.linkpc.net/3094093097097094/Wait-for-Me-by-Deborah-Mitford.pdf
    • http://loaminoo.linkpc.net/2098094095090091/In-the-Company-of-Others-Mitford-Years-11-by-Jan-Karon.pdf
    • http://loaminoo.linkpc.net/3098092095093095/Frederick-the-Great-by-Nancy-Mitford.pdf
    • http://loaminoo.linkpc.net/4094098096099/A-New-Song-Mitford-Years-5-by-Jan-Karon.pdf
    • http://loaminoo.linkpc.net/2096094097095092/Wait-for-Me-Memoirs-by-Deborah-Mitford.pdf
    • http://loaminoo.linkpc.net/1090099095093099093/Die-Mitford-Sisters-by-Karlheinz-Sch-dlich.pdf
    • http://loaminoo.linkpc.net/2099096090093097/Voltaire-in-Love-by-Nancy-Mitford.pdf
    • http://loaminoo.linkpc.net/4095091095094/The-Pursuit-of-Love-by-Nancy-Mitford.pdf
    • http://loaminoo.linkpc.net/2099096090091093/A-Talent-To-Annoy-by-Nancy-Mitford.pdf
    • http://loaminoo.linkpc.net/4090099097098094/Pigeon-Pie-by-Nancy-Mitford

Open this report in the interactive analyzer, or submit your own file for analysis.