Malicious PDF — malware analysis report

Static analysis result for SHA-256 2389a6f9b1cd540c…

MALICIOUS

PDF

17.3 KB Created: 2019-05-07 04:21:20 +01:00 Authoring application: mPDF 5.7
MD5: 7485e558bf41244644c9bc10c4b36391 SHA-1: 4d02eaae930ac2e04047fbe8f943a16e48892750 SHA-256: 2389a6f9b1cd540c157873e1cc4746b7befc99306bef691d07f63da8eafb0fbf
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF contains a large number of embedded URLs, identified as a 'PDF_SEO_LINK_FARM' heuristic. While the URLs themselves are currently marked as benign, the sheer volume and structure suggest a malicious intent, possibly for SEO poisoning or to redirect users to malicious sites. No scripts were extracted from this sample.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/1093098096096099/Summer-Dreams-Winter-Love-by-Mary-Francis-Shura.pdf
    • http://loaminoo.linkpc.net/1095099091092090/Winter-Dreams-Christmas-Love-by-Mary-Francis-Shura.pdf
    • http://loaminoo.linkpc.net/4096099093097096/Gabrielle-Sunfire-24-by-Mary-Francis-Shura.pdf
    • http://loaminoo.linkpc.net/1098091095091097/Marilee-Sunfire-9-by-Mary-Francis-Shura.pdf
    • http://loaminoo.linkpc.net/2095098097097099/The-Summer-Jenny-Fell-in-Love-Sweet-Dreams-13-by-Barbara-Conklin.pdf
    • http://loaminoo.linkpc.net/2095098097098091/Winter-Dreams-Sweet-Dreams-141-by-Barbara-Conklin.pdf
    • http://loaminoo.linkpc.net/2091098092097091/The-Summer-Girls-Lowcountry-Summer-1-by-Mary-Alice-Monroe.pdf
    • http://loaminoo.linkpc.net/4092091093094090/The-Summer-Wind-Lowcountry-Summer-2-by-Mary-Alice-Monroe.pdf
    • http://loaminoo.linkpc.net/7098094099093099/Serie-Televisive-Francesi-Galactik-Football-Summer-Crush-Kung-Foot-Summer-Dreams-Highlander-Julie-Lescaut-Highlander-The-Raven-15love-by-Fonte-Wikipedia.pdf
    • http://loaminoo.linkpc.net/7094091099097095/Hot-Summer-Love-Box-Set-Five-Full-Length-Sexy-amp-Seductive-Summer-Sizzles-by-Cali-MacKay.pdf
    • http://loaminoo.linkpc.net/6091097092098092/The-Francis-Chan-Collection-Crazy-Love-Forgotten-God-Erasing-Hell-and-Multiply-by-Francis-Chan.pdf
    • http://loaminoo.linkpc.net/1099096093094090/Blood-Winter-Horngate-Witches-4-by-Diana-Pharaoh-Francis.pdf
    • http://loaminoo.linkpc.net/1090097099098099090/Winter-of-Dreams-by-Susan-Napier.pdf
    • http://loaminoo.linkpc.net/2098093096091094/Edge-of-Dreams-Diamond-City-Magic-2-by-Diana-Pharaoh-Francis.pdf
    • http://loaminoo.linkpc.net/3096095096098094/The-Winter-Oak-Summer-Country-2-by-James-A-Hetley.pdf
    • http://loaminoo.linkpc.net/3093098098099098/Summer-Lessons-Winter-Ball-2-by-Amy-Lane.pdf
    • http://loaminoo.linkpc.net/6099092094095090/Winter-Notes-on-Summer-Impressions-by-Fyodor-Dostoyevsky.pdf
    • http://loaminoo.linkpc.net/6092092096092094/Plays-2-A-Summer-s-Day-Dream-of-Autumn-Winter-by-Jon-Fosse.pdf
    • http://loaminoo.linkpc.net/1099095097091092/The-Summer-Marked-The-Winter-People-2-by-Rebekah-L-Purdy.pdf
    • http://loaminoo.linkpc.net/2095099098091090/The-Summer-Marked-The-Winter-People-2-by-Rebekah-L-Purdy.pdf
    • http://loaminoo.linkpc.net/7098094099093099/Serie-Televisive-Francesi-Galactik-Football-Summer-Crush-Kung-Foot-Summer-Dreams-Highlander-Julie-Lescaut-Highlander-The-Raven-15lov

Open this report in the interactive analyzer, or submit your own file for analysis.