Malicious PDF — malware analysis report

Static analysis result for SHA-256 1ff8689bb58e5db6…

MALICIOUS

PDF

16.3 KB Created: 2019-04-30 23:18:32 +01:00 Authoring application: mPDF 5.7
MD5: 882282dd042f50784da6c2de05d10b7b SHA-1: 6c0e74220fc82462fe898a8497228ffa0ce10903 SHA-256: 1ff8689bb58e5db69f1c5399a33ab626541ce9ac4757ea9e4f37386156c5dc90
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF contains a large number of embedded links, identified by the PDF_SEO_LINK_FARM heuristic. These links point to various book titles hosted on loaminoo.linkpc.net. While the individual links are marked as benign, the sheer volume and structure suggest a link farm or SEO manipulation tactic, which can be a precursor to malicious activity. No scripts were extracted from this sample.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/7094095095096097/Ninety-Two-Days-A-Journey-In-Guiana-And-Brazil-1932-by-Evelyn-Waugh.pdf
    • http://loaminoo.linkpc.net/6090099093097/Seeing-True-Ninety-Contemplations-in-Ninety-Days-by-Ronald-Chapman.pdf
    • http://loaminoo.linkpc.net/9098095098094093/The-Diaries-Of-Evelyn-Waugh-by-Evelyn-Waugh.pdf
    • http://loaminoo.linkpc.net/3099093099094/The-Loved-One-by-Evelyn-Waugh.pdf
    • http://loaminoo.linkpc.net/5090091094091094/Scoop-by-Evelyn-Waugh.pdf
    • http://loaminoo.linkpc.net/1099093097095096/The-Loved-One-by-Evelyn-Waugh.pdf
    • http://loaminoo.linkpc.net/6095096098095/Scoop-by-Evelyn-Waugh.pdf
    • http://loaminoo.linkpc.net/7096099091090/A-Handful-of-Dust-by-Evelyn-Waugh.pdf
    • http://loaminoo.linkpc.net/1098093090096092/Vile-Bodies-by-Evelyn-Waugh.pdf
    • http://loaminoo.linkpc.net/1090097090097093093/Verfall-und-Untergang-by-Evelyn-Waugh.pdf
    • http://loaminoo.linkpc.net/3092093091094099/Brideshead-Revisited-by-Evelyn-Waugh.pdf
    • http://loaminoo.linkpc.net/9091095094095097/Ronald-Knox-A-Biography-by-Evelyn-Waugh.pdf
    • http://loaminoo.linkpc.net/9098095099095093/Evelyn-Waugh-A-Biography-by-Christopher-Sykes.pdf
    • http://loaminoo.linkpc.net/4097094094097094/Love-Among-the-Ruins-A-Romance-of-the-Near-Future-by-Evelyn-Waugh.pdf
    • http://loaminoo.linkpc.net/9096099091092095/Tod-in-Hollywood-Eine-anglo-amerikanische-Trag-die-by-Evelyn-Waugh.pdf
    • http://loaminoo.linkpc.net/9098095098091091/Mad-World-Evelyn-Waugh-and-the-Secrets-of-Brideshead-by-Paula-Byrne.pdf
    • http://loaminoo.linkpc.net/9098095098091093/The-Letters-of-Nancy-Mitford-and-Evelyn-Waugh-by-Charlotte-Mosley.pdf
    • http://loaminoo.linkpc.net/2098095091091091/Brideshead-Revisited-The-Sacred-and-Profane-Memories-of-Captain-Charles-Ryder-by-Evelyn-Waugh.pdf
    • http://loaminoo.linkpc.net/1091096092097092094/Kalenderblatt-zum-Jahr-1932-Der-quot-Br-ningtaler-quot-von-1932-dem-letzten-Jahr-vor-der-faschistischen-Diktatur-Der-Vatikanstaat-vorgestellt-durch-5-Lire-von-1932-by-Joachim-Bonatz.pdf
    • http://loaminoo.linkpc.net/3093092098095095/Tea-and-Green-Ribbons-Evelyn-s-Story-by-Evelyn-Doyle.pdf
    • http://loaminoo.linkpc.net/9098095099095093/Evelyn-Waugh-A-Biography-by-Christoph

Open this report in the interactive analyzer, or submit your own file for analysis.