Malicious PDF — malware analysis report

Static analysis result for SHA-256 1fb7e65ece4ecec2…

MALICIOUS

PDF

16.5 KB Created: 2019-05-02 01:26:21 +01:00 Authoring application: mPDF 5.7
MD5: 95c161f0dd8b94f0c6ccd62b0267f935 SHA-1: 5fc4a326ad0c59efbcf7b2e803355dea3e92a56a SHA-256: 1fb7e65ece4ecec2db60842526187afc7b0f9f690e7edd8c84f956ac5e5155c9
60 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell

The PDF file contains a large number of embedded links pointing to external PDF documents hosted on the domain 'loaminoo.linkpc.net'. This heuristic firing suggests a link farm or a method to distribute content through numerous redirects. The document body was unreadable, and no scripts were extracted, limiting further analysis of the exact payload or intent beyond the link distribution. The MITRE technique T1059.001 is included due to the general nature of PDF documents potentially executing embedded scripts, though none were explicitly found here.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/1091098094097097090/Ruhe-in-Fetzen-Ein-Fall-f-r-Mrs-Murphy-Ein-Mrs--Murphy-Krimi-2-by-Rita-Mae-Brown.pdf
    • http://loaminoo.linkpc.net/1091098094098097092/Die-Katze-l-sst-das-Mausen-nicht-Ein-Fall-f-r-Mrs-Murphy-Ein-Mrs--Murphy-Krimi-10-by-Rita-Mae-Brown.pdf
    • http://loaminoo.linkpc.net/8097096094092094/Die-Katze-l-sst-das-Mausen-nicht-Maus-im-Aus-Ein-Fall-f-r-Mrs-Murphy-Catch-As-Cat-Can-Tail-Of-The-Tip-Off-Mrs-Murphy-10-11-by-Rita-Mae-Brown.pdf
    • http://loaminoo.linkpc.net/3091098095090091/Wish-You-Were-Here-Mrs-Murphy-1-by-Rita-Mae-Brown.pdf
    • http://loaminoo.linkpc.net/3092097095099094/The-Litter-of-the-Law-Mrs-Murphy-22-by-Rita-Mae-Brown.pdf
    • http://loaminoo.linkpc.net/3091098091091098/Nine-Lives-to-Die-Mrs-Murphy-23-by-Rita-Mae-Brown.pdf
    • http://loaminoo.linkpc.net/3091096096098097/Catch-as-Cat-Can-Mrs-Murphy-10-by-Rita-Mae-Brown.pdf
    • http://loaminoo.linkpc.net/2093090099091090/Cat-of-the-Century-A-Mrs-Murphy-Mystery-by-Rita-Mae-Brown.pdf
    • http://loaminoo.linkpc.net/8094090093094094/Tail-Gait-Mrs-Murphy-24-by-Rita-Mae-Brown.pdf
    • http://loaminoo.linkpc.net/2094094093091092/In-Her-Day-by-Rita-Mae-Brown.pdf
    • http://loaminoo.linkpc.net/3093097094094090/Rubyfruit-Jungle-by-Rita-Mae-Brown.pdf
    • http://loaminoo.linkpc.net/2097095090095095/Starting-from-Scratch-by-Rita-Mae-Brown.pdf
    • http://loaminoo.linkpc.net/2090090095095/Bingo-Runnymede-2-by-Rita-Mae-Brown.pdf
    • http://loaminoo.linkpc.net/2093095097092090/Murder-Unleashed-Mags-Rogers-2-by-Rita-Mae-Brown.pdf
    • http://loaminoo.linkpc.net/9094099090099091/Wie-du-mir-so-ich-dir-and-Jacke-wie-Hose-Zwei-Romane-in-einem-Band-by-Rita-Mae-Brown.pdf
    • http://loaminoo.linkpc.net/4096096099091091/The-Tell-tale-Horse-quot-Sister-quot-Jane-6-by-Rita-Mae-Brown.pdf
    • http://loaminoo.linkpc.net/4090095091098095/Outfoxed-quot-Sister-quot-Jane-1-by-Rita-Mae-Brown.pdf
    • http://loaminoo.linkpc.net/5098094093093092/Pmp-Exam-Prep-Rita-s-Course-in-a-Book-for-Passing-the-Pmp-Exam-by-Rita-Mulcahy.pdf
    • http://loaminoo.linkpc.net/1091095098097096092/Murphy-und-das-Grauen-D-monenj-ger-Murphy-by-Earl-Warren.pdf
    • http://loaminoo.linkpc.net/1091095098096098098/Murphy-und-die-Templer-D-monenj-ger-Murphy-by-Ann-Murdoch.pdf
    • http://loaminoo.linkpc.net/3091098095090091/Wish-You-Were-Here-Mrs-Murphy-1-by-Rita-Mae

Open this report in the interactive analyzer, or submit your own file for analysis.