Malicious PDF — malware analysis report

Static analysis result for SHA-256 22cf7c266bb39831…

MALICIOUS

PDF

17.3 KB Created: 2019-11-28 22:25:43 +00:00 Authoring application: mPDF 5.7
MD5: 7155d08eb7c4ab006a36516ef195bb46 SHA-1: 4ce7bcc574b972ce3c75e16e14c8f6133ad203a9 SHA-256: 22cf7c266bb39831e2046d1705811769f92854de9cb9f9e44848e7a51a2d2d98
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF file contains a large number of embedded links to external PDF documents, constituting a link farm. This technique is often used to artificially inflate search engine rankings or to distribute malicious content. The primary heuristic indicates a critical finding related to this link farm behavior. While the linked PDFs themselves are marked as benign, the overall structure suggests a malicious intent to redirect users. No scripts were extracted from this sample.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/8735730732735739/Le-Morte-Darthur-Sir-Thomas-Malory-s-Book-of-King-Arthur-and-his-Noble-Knights-of-the-Round-Table-by-Thomas-Malory.pdf
    • http://cefasfese.4pu.com/1730739738731733738/Le-Morte-D-arthur-By-Thomas-Malory---Rank-83-Of-100-100-Formatted-Wordwise-Enabled-Active-TOC-Active-Footnotes-Illustrated--JKL-Classics-by-Thomas-Malory.pdf
    • http://cefasfese.4pu.com/4736737738732732/Le-Morte-d-Arthur-King-Arthur-and-the-Legends-of-the-Round-Table-by-Thomas-Malory.pdf
    • http://cefasfese.4pu.com/3739737739732732/Le-Morte-D-Arthur-by-Thomas-Malory.pdf
    • http://cefasfese.4pu.com/8738736730736/Le-Morte-d-Arthur-by-Thomas-Malory.pdf
    • http://cefasfese.4pu.com/2734730732734737/The-Boy-s-King-Arthur-Sir-Thomas-Malory-s-History-of-King-Arthur-and-His-Knights-of-the-Round-Table-by-Sidney-Lanier.pdf
    • http://cefasfese.4pu.com/3737731739734736/Works-Malory-by-Thomas-Malory.pdf
    • http://cefasfese.4pu.com/3738735737735734/Mrs-Malory-s-Shortest-Journey-Mrs-Malory-Mysteries-3-by-Hazel-Holt.pdf
    • http://cefasfese.4pu.com/1730733737732732/Second-Form-at-Malory-Towers-Malory-Towers-2-by-Enid-Blyton.pdf
    • http://cefasfese.4pu.com/8735733738739739/Secrets-at-Malory-Towers-Malory-Towers-11-by-Pamela-Cox.pdf
    • http://cefasfese.4pu.com/8735733739735739/Goodbye-Malory-Towers-Malory-Towers-12-by-Pamela-Cox.pdf
    • http://cefasfese.4pu.com/3731731739733734/Arthur-Rex-by-Thomas-Berger.pdf
    • http://cefasfese.4pu.com/9737734739730/Out-on-the-Rim-Arthur-Case-Wu-2-by-Ross-Thomas.pdf
    • http://cefasfese.4pu.com/4730739730730736/Way-Out-A-True-Account-of-Schizophrenia-by-Arthur-Thomas-Morton.pdf
    • http://cefasfese.4pu.com/3737730730738731/Gentleman-Boss-The-Life-of-Chester-Alan-Arthur-by-Thomas-C-Reeves.pdf
    • http://cefasfese.4pu.com/4732733739731/I-am-Morte-by-Elyse-Draper.pdf
    • http://cefasfese.4pu.com/4736739733733730/Foretell-Wanderlove-2-by-Belle-Malory.pdf
    • http://cefasfese.4pu.com/1731734732731732737/E-no-Final-a-Morte-by-Agatha-Christie.pdf
    • http://cefasfese.4pu.com/6735730734734735/Bella-Morte-by-Josephine-Ballowe.pdf
    • http://cefasfese.4pu.com/1730735737735734739/Di-morte-e-d-ambra-by-Ashara-Amati.pdf
    • http://cefasfese.4pu.com/2734

Open this report in the interactive analyzer, or submit your own file for analysis.