Malicious PDF — malware analysis report

Static analysis result for SHA-256 1fbbfa56655f1fbe…

MALICIOUS

PDF

13.0 KB Created: 2019-04-30 02:43:32 +01:00 Authoring application: mPDF 5.7
MD5: 780d182167d44f7b4c0c883aa57aedb4 SHA-1: 6f3a44a1c6c0145d232638b4a709a27c6974b111 SHA-256: 1fbbfa56655f1fbec70532ed5ceaf3a79590705d97cb94559a2ea270bcf090e1
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1059.001 PowerShell

The PDF file contains a heuristic firing for a link farm, with numerous embedded URLs pointing to external PDF documents. The document body confirms the presence of these links, which are likely used to direct users to malicious content or phishing sites. No scripts were extracted, and the family is unknown.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/7099095091092/Golden-Fox-Courtney-8-by-Wilbur-Smith.pdf
    • http://loaminoo.linkpc.net/7091098098091/Rage-Courtney-6-by-Wilbur-Smith.pdf
    • http://loaminoo.linkpc.net/2092092091094099/Monsoon-Courtney-10-by-Wilbur-Smith.pdf
    • http://loaminoo.linkpc.net/1093090094092093/Birds-of-Prey-by-Wilbur-Smith.pdf
    • http://loaminoo.linkpc.net/3096092094091095/The-Eye-of-the-Tiger-Golden-Fox-by-Wilbur-Smith.pdf
    • http://loaminoo.linkpc.net/3095095091093/When-the-Lion-Feeds-Courtney-1-by-Wilbur-Smith.pdf
    • http://loaminoo.linkpc.net/1094097094092091/A-Sparrow-Falls-Courtney-3-by-Wilbur-Smith.pdf
    • http://loaminoo.linkpc.net/3092099098099/River-God-Ancient-Egypt-1-by-Wilbur-Smith.pdf
    • http://loaminoo.linkpc.net/1094099098093097/Sound-of-Thunder-Courtney-2-by-Wilbur-Smith.pdf
    • http://loaminoo.linkpc.net/2094098094095090/Warlock-A-Novel-of-Ancient-Egypt-by-Wilbur-Smith.pdf
    • http://loaminoo.linkpc.net/5092093090098091/Desert-God-Ancient-Egypt-5-by-Wilbur-Smith.pdf
    • http://loaminoo.linkpc.net/8099093098097/The-Quest-Ancient-Egypt-4-by-Wilbur-Smith.pdf
    • http://loaminoo.linkpc.net/5098096090091096/Those-in-Peril-Hector-Cross-1-by-Wilbur-Smith.pdf
    • http://loaminoo.linkpc.net/9094093099094097/Goldmine-The-Burning-Shore-by-Wilbur-Smith.pdf
    • http://loaminoo.linkpc.net/5098095099097098/Predator-Hector-Cross-3-by-Wilbur-Smith.pdf
    • http://loaminoo.linkpc.net/7091097093091098/Magi-r-De-Egypte-serie-Book-3-by-Wilbur-Smith.pdf
    • http://loaminoo.linkpc.net/4094099095091094/Vicious-Circle-Hector-Cross-2-by-Wilbur-Smith.pdf
    • http://loaminoo.linkpc.net/1090092096093093092/On-Leopard-Rock-A-Life-of-Adventures-by-Wilbur-Smith.pdf
    • http://loaminoo.linkpc.net/1094099098090093/The-Leopard-Hunts-in-Darkness-The-Ballantyne-Novels-4-by-Wilbur-Smith.pdf
    • http://loaminoo.linkpc.net/2099097090097/Stories-from-Afield-Adventures-with-Wild-Things-in-Wild-Places-by-Bruce-L-Smith.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.