Malicious PDF — malware analysis report

Static analysis result for SHA-256 22c3638ef940c575…

MALICIOUS

PDF

14.7 KB Created: 2019-06-04 12:36:12 +01:00 Authoring application: mPDF 5.7
MD5: 5f3880aaf713b323902f228958816a6b SHA-1: e05db89d289a49c36e0b7428ed3b3875a51dff54 SHA-256: 22c3638ef940c575be65c37279d2a3b71dc10a222a7490cdcb213ba27efdbcde
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF file contains a heuristic firing for PDF_SEO_LINK_FARM, indicating a large number of embedded external links. While the extracted URLs themselves are currently marked as benign, the sheer volume and structure suggest a malicious intent, possibly for SEO manipulation or as a lure for further malicious activity. No scripts were extracted from this sample.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/1733738730731731/Echo-Boy-by-Matt-Haig.pdf
    • http://cefasfese.4pu.com/6730731730/How-to-Stop-Time-by-Matt-Haig.pdf
    • http://cefasfese.4pu.com/2731737735733734/The-Labrador-Pact-by-Matt-Haig.pdf
    • http://cefasfese.4pu.com/9730730732733730/Father-Christmas-and-Me-by-Matt-Haig.pdf
    • http://cefasfese.4pu.com/9730730732733731/Brand-Failures-The-Truth-about-the-100-Biggest-Branding-Mistakes-of-All-Time-by-Matt-Haig.pdf
    • http://cefasfese.4pu.com/8730732731730735/Roger-and-His-Humans-Roger-and-His-Humans-1-by-Cyprien.pdf
    • http://cefasfese.4pu.com/9730730732735730/Haig-by-Anonymous.pdf
    • http://cefasfese.4pu.com/1738738731733731/Glory-by-Mindy-Haig.pdf
    • http://cefasfese.4pu.com/3739732734735733/The-Realization-by-Ida-Haig-Janis.pdf
    • http://cefasfese.4pu.com/9730730732735734/With-Haig-On-The-Somme-by-Herbert-Strang.pdf
    • http://cefasfese.4pu.com/4739730739738731/Panther-by-Roderick-L-Haig-Brown.pdf
    • http://cefasfese.4pu.com/9730730732734734/Haig-The-General-s-Progress-by-Roger-Morris.pdf
    • http://cefasfese.4pu.com/9730730733730731/The-Casebook-of-Doakes-and-Haig-by-Patrick-Welch.pdf
    • http://cefasfese.4pu.com/9730730732739739/A-River-Never-Sleeps-by-Roderick-L-Haig-Brown.pdf
    • http://cefasfese.4pu.com/1735733735732730/Private-Sector-Sean-Drummond-4-by-Brian-Haig.pdf
    • http://cefasfese.4pu.com/9730730734732732/Haig-s-Intelligence-GHQ-and-the-German-Army-1916-1918-by-Jim-Beach.pdf
    • http://cefasfese.4pu.com/1731730735733732/Matt-Archer-Monster-Hunter-Matt-Archer-1-by-Kendra-C-Highley.pdf
    • http://cefasfese.4pu.com/9730730733730735/The-Hindenburg-Line-1918-Haig-s-forgotten-triumph-by-Alistair-Mccluskey.pdf
    • http://cefasfese.4pu.com/9730730732735732/Douglas-Haig-War-Diaries-and-Letters-1914-1918-by-Gary-Sheffield.pdf
    • http://cefasfese.4pu.com/2738732737733737/Stupid-Humans-by-V-R-Craft.pdf
    • http://cefasfese.4pu.com/9730730733730731/The-Casebook-of-Doakes-an

Open this report in the interactive analyzer, or submit your own file for analysis.