Malicious PDF — malware analysis report

Static analysis result for SHA-256 238f7f000994b77e…

MALICIOUS

PDF

15.2 KB Created: 2019-05-03 06:07:29 +01:00 Authoring application: mPDF 5.7
MD5: 8676244f5ba19c6ff790412b4f6ad8a9 SHA-1: 44769d3d493c93fdc25ec58626e12a4d61b7482b SHA-256: 238f7f000994b77e8c1b6c6d33b1446d3b71ba0614f145b3e7cee9d5856b60af
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF file contains a large number of embedded links to external PDF documents, as indicated by the PDF_SEO_LINK_FARM heuristic. While most of these links are marked as benign, the sheer volume and the nature of the heuristic suggest a potential attempt at SEO manipulation or a distribution mechanism for further malicious content. No scripts were extracted from this sample. The attack pattern is inferred from the link farm, suggesting a lure to external resources.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/8739734739/The-Exes-Revenge-by-Jo-Jakeman.pdf
    • http://cefasfese.4pu.com/6735733738737733/Sweet-Revenge-Passive-Aggressive-Desserts-for-Your-Exes-amp-Enemies-by-Heather-Kim.pdf
    • http://cefasfese.4pu.com/9732739739738731/Pine-Tree-Poems-by-Adelbert-Jakeman.pdf
    • http://cefasfese.4pu.com/9738731732737/Step-Up-to-IELTS-Self-Study-Student-s-Book-by-Vanessa-Jakeman.pdf
    • http://cefasfese.4pu.com/4735739734730736/Exes-and-Ohs-by-Beth-Kendrick.pdf
    • http://cefasfese.4pu.com/4738732732737734/Exes-and-Goals-Slapshot-1-by-Heather-C-Myers.pdf
    • http://cefasfese.4pu.com/7737730732731732/Blackbeard-s-Revenge-The-Voyages-of-Queen-Anne-s-Revenge-2-by-Jeremy-McLean.pdf
    • http://cefasfese.4pu.com/8738731734734733/Hexes-and-Exes-Womby-s-School-for-Wayward-Witches-5-by-Sarina-Dorie.pdf
    • http://cefasfese.4pu.com/3739731738739732/Revenge-Volume-2-Revenge-2-by-J-J-Knight.pdf
    • http://cefasfese.4pu.com/8730738732733730/Four-Revenge-Tragedies-The-Spanish-Tragedy-The-Revenger-s-Tragedy-The-Revenge-of-Bussy-D-Ambois-And-the-Atheist-s-Tragedy-by-Katharine-Eisaman-Maus.pdf
    • http://cefasfese.4pu.com/2738735731739736/Shall-We-Not-Revenge-by-D-M-Pirrone.pdf
    • http://cefasfese.4pu.com/4734739735739731/Revenge-is-Sweet-by-J-D-Anders.pdf
    • http://cefasfese.4pu.com/3738730736730737/Revenge-on-the-Fly-by-Sylvia-McNicoll.pdf
    • http://cefasfese.4pu.com/3731734735733739/Sweet-Revenge-by-Kay-Rogal.pdf
    • http://cefasfese.4pu.com/6732734739731/Revenge-by-Y-ko-Ogawa.pdf
    • http://cefasfese.4pu.com/1732737730732738/Key-West-Revenge-by-Lee-A-Sweetapple.pdf
    • http://cefasfese.4pu.com/7735736/I-Am-Her-Revenge-by-Meredith-Moore.pdf
    • http://cefasfese.4pu.com/5730731735732731/O-Rourke-s-Revenge-by-L-J-Martin.pdf
    • http://cefasfese.4pu.com/2736738739733735/Recipes-For-Revenge-A-Four-Course-Novel-by-G-M-Barlean.pdf
    • http://cefasfese.4pu.com/8734731737732738/Revenge-of-the-Zarnones-by-Trebor-Novel.pdf
    • http://cefasfese.4pu.com/87307387

Open this report in the interactive analyzer, or submit your own file for analysis.