Malicious PDF — malware analysis report

Static analysis result for SHA-256 1cc1e1adc97accbe…

MALICIOUS

PDF

16.4 KB Created: 2019-05-02 17:40:10 +01:00 Authoring application: mPDF 5.7
MD5: 5c9f96ca2194005c4ad5f8e4b5dbd4cd SHA-1: 211ad775eb75ca5d4932e27dac23b584092611b5 SHA-256: 1cc1e1adc97accbe88d21fff3456bc214ce8de08a5bba49d04ae9bd32605bd3f
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1059.001 PowerShell

The PDF file contains a large number of embedded links, identified by the PDF_SEO_LINK_FARM heuristic. The document body, though heavily obfuscated, also contains these URLs. The primary function appears to be directing users to external content, likely for SEO manipulation or to serve as a distribution point for further malicious content. No scripts were extracted, limiting the ability to determine more specific behaviors.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/1090090090095098096/Politics-An-Immigrant-s-Tale-by-Nee-Corleone.pdf
    • http://loaminoo.linkpc.net/1090090090096090092/Corleone-Vol-1-of-2-A-Tale-of-Sicily-by-F-Marion-Crawford.pdf
    • http://loaminoo.linkpc.net/3090097098095097/Italian-Immigrant-Cooking-Immigrant-Cookbook-Series-Bk-1-by-Elodia-Rigante.pdf
    • http://loaminoo.linkpc.net/2098097092098093/Knights-of-the-Sea-A-Grim-Tale-of-Murder-Politics-and-Spoon-Addiction-by-Paul-Marlowe.pdf
    • http://loaminoo.linkpc.net/1090090090094095095/Payoff-Simon-Fisk-2-by-Douglas-Corleone.pdf
    • http://loaminoo.linkpc.net/3090097094090098/Good-As-Gone-Simon-Fisk-1-by-Douglas-Corleone.pdf
    • http://loaminoo.linkpc.net/1090090090094096090/Gone-Cold-Simon-Fisk-3-by-Douglas-Corleone.pdf
    • http://loaminoo.linkpc.net/1090090090094096095/Meatball-Recipe-Madness-by-Carmela-Corleone.pdf
    • http://loaminoo.linkpc.net/1090090090094095097/Night-on-Fire-Kevin-Corvelli-2-by-Douglas-Corleone.pdf
    • http://loaminoo.linkpc.net/1090090090094095098/Last-Lawyer-Standing-Kevin-Corvelli-3-by-Douglas-Corleone.pdf
    • http://loaminoo.linkpc.net/1090090090095098099/How-to-manage-other-people-Management-for-Pros-by-Douglas-Corleone.pdf
    • http://loaminoo.linkpc.net/1090090090095095094/The-Godfather-Returns-A-New-Novel-Based-on-the-Corleone-Family-Characters-Created-by-Mario-Puzo-by-Mark-Winegardner.pdf
    • http://loaminoo.linkpc.net/1090090090096090091/THE-REAL-GODFATHER-DID-CHICAGO-S-TONY-ACCARDO-SERVE-AS-THE-ROLE-MODEL-FOR-DON-CORLEONE-by-James-Bankes.pdf
    • http://loaminoo.linkpc.net/1094097093094091/The-Immigrant-by-Manju-Kapur.pdf
    • http://loaminoo.linkpc.net/8094098092090/London-for-immigrant-suckers-by-Kolya-S.pdf
    • http://loaminoo.linkpc.net/4090096090/The-Good-Immigrant-by-Nikesh-Shukla.pdf
    • http://loaminoo.linkpc.net/6094094092098094/The-Ellis-Island-Immigrant-Cookbook-by-Tom-Bernardin.pdf
    • http://loaminoo.linkpc.net/8092094094096094/Encyclopedia-of-Immigrant-Health-by-Sana-Loue.pdf
    • http://loaminoo.linkpc.net/3092099092096092/The-Immigrant-s-House-by-Robert-Bruce-Smith.pdf
    • http://loaminoo.linkpc.net/4094093094093096/Illegal-Reflections-of-an-Undocumented-Immigrant-by-Jos-ngel-N-.pdf
    • http://loaminoo.linkpc.net/1090090090095098099/How-to-man

Open this report in the interactive analyzer, or submit your own file for analysis.