Malicious PDF — malware analysis report

Static analysis result for SHA-256 1d3d6dc403dd1dd9…

MALICIOUS

PDF

28.9 KB Created: 2020-03-18 16:56:14 +00:00 Authoring application: mPDF 5.7
MD5: 6863d40b302b7d1d1ecff3e839a78a2b SHA-1: 82811688b5e2ad77837eb282d889778d87207b99 SHA-256: 1d3d6dc403dd1dd97fc1cd89cf31de7ffd3e428411caa1568ccf9afd0e18450a
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1204.002 Malicious Link

The PDF file contains a large number of embedded links to external PDF documents, as indicated by the PDF_SEO_LINK_FARM heuristic. The document body, though heavily obfuscated, also contains these URLs. This suggests a link farm or SEO spamming attack, potentially leading users to malicious content or phishing sites. No scripts were extracted from this sample.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://ieuicufioao.myhome.cx/4555554555555552/Passive-Income-for-Life-A-Time-Tested-Secret-Recipe-for-Building-a-50-000-Cash-Machine-on-Amazon-com-In-Your-Spare-Time-Almost-Free-Money-volume-5-by-Eric-Michael.pdf
    • http://ieuicufioao.myhome.cx/4555555552551551/Fast-Cash-Flipping-Used-Items---How-to-Make-a-Great-Second-Income-by-Selling-Used-Items-from-Garage-Sales-Yard-Sales-Thrift-Shops-and-Flea-Markets-Almost-Free-Money-Volume-4-by-Eric-Michael.pdf
    • http://ieuicufioao.myhome.cx/3555551553550556/Think-Trade-and-Grow-Rich-A-Powerful-Beginner-s-Guide-to-Building-Passive-Income-Through-Momentum-Swing-Trading-and-Stock-Market-Investing-by-Benjamin-Kahriman.pdf
    • http://ieuicufioao.myhome.cx/6550554550551552/Recycle-and-Be-Creative-How-to-Recycle-Have-Fun-and-Make-Money-in-Your-Spare-Time-Recycle-Recycling-How-to-Recycle-Save-Money-by-Recycling-Reuse-by-Jasmine-Ragon.pdf
    • http://ieuicufioao.myhome.cx/8558555559550557/The-Adventures-of-Caroline-And-the-Time-Machine-by-Eric-Oberst.pdf
    • http://ieuicufioao.myhome.cx/1558550557557552/Secret-of-the-Knights-Time-Machine-1-by-Jim-Gasperini.pdf
    • http://ieuicufioao.myhome.cx/5551552552554/The-Complete-Guide-in-eBook-Kindle-Business-How-to-Start-a-Home-Based-eBook-Kindle-Business-to-Earn-Extra-Money-and-a-Passive-Income-by-Sheryl-Blume.pdf
    • http://ieuicufioao.myhome.cx/9551551554551551/The-Time-Machine-Centaur-Classics-The-100-greatest-novels-of-all-time---96-by-H-G-Wells.pdf
    • http://ieuicufioao.myhome.cx/8556551557550554/The-Time-Machine---Special-Illustrated-Edition-Includes-Exclusive-Time-Travelers-Photobook-by-H-G-Wells.pdf
    • http://ieuicufioao.myhome.cx/5554551550552554/The-Time-Machine-By-H-G-Wells---Illustrated-Comes-with-a-Free-Audiobook-by-H-G-Wells.pdf
    • http://ieuicufioao.myhome.cx/1550556554552556553/Organize-Your-Life-Free-Yourself-from-Clutter-and-Find-More-Personal-Time-by-Ronni-Eisenberg.pdf
    • http://ieuicufioao.myhome.cx/6550552555553/Time-Dancers-The-Meq-2-by-Steve-Cash.pdf
    • http://ieuicufioao.myhome.cx/2557555555555556/The-Nighttime-Novelist-Finish-Your-Novel-in-Your-Spare-Time-by-Joseph-Bates.pdf
    • http://ieuicufioao.myhome.cx/1552552558553559/The-Art-of-the-Start-The-Time-Tested-Battle-Hardened-Guide-for-Anyone-Starting-Anything-by-Guy-Kawasaki.pdf
    • http://ieuicufioao.myhome.cx/1556552553557556/All-the-Rules-Time-Tested-Secrets-for-Capturing-the-Heart-of-Mr-Right-by-Ellen-Fein.pdf
    • http://ieuicufioao.myhome.cx/5553557551551/Time-s-Secret-Time-s-Edge-2-by-J-M-Dattilo.pdf
    • http://ieuicufioao.myhome.cx/1556556558551550/Time-and-the-Gloaming-7-Time-Travel-Stories-by-Michael-Bunker.pdf
    • http://ieuicufioao.myhome.cx/4550559554558/Crush-It-Why-Now-Is-the-Time-to-Cash-In-on-Your-Passion-by-Gary-Vaynerchuk.pdf
    • http://ieuicufioao.myhome.cx/1550554559553554555/Data-Science-at-the-Command-Line-Facing-the-Future-with-Time-Tested-Tools-by-Jeroen-Janssens.pdf
    • http://ieuicufioao.myhome.cx/2557551553555550/A-Random-Walk-Down-Wall-Street-The-Time-Tested-Strategy-for-Successful-Investing-by-Burton-G-Malkiel.pdf
    • http://ieuicufioao.myhome.cx/3555551553550556/Think-Trade-and-Grow-R

Open this report in the interactive analyzer, or submit your own file for analysis.