Malicious PDF — malware analysis report

Static analysis result for SHA-256 23de9f43beb11dc7…

MALICIOUS

PDF

18.2 KB Created: 2020-03-17 03:38:49 +00:00 Authoring application: mPDF 5.7
MD5: 4fddd790535f6d0b001df2afb9f39b91 SHA-1: a5782df889b7682a0c9a5da67c4ee976f528c950 SHA-256: 23de9f43beb11dc785bd8fffb7b624578521d231bc8385440fc7e6f0bc22bf62
120 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF file contains a large number of embedded links, identified as a PDF_SEO_LINK_FARM heuristic. These links all point to the same domain, ieuicufioao.myhome.cx, and appear to be disguised as book titles. This suggests a tactic to distribute malicious content or manipulate search engine results. No scripts were extracted from this sample.

Heuristics 3

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • ClamAV: Pdf.Malware.Agent-9909941-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Pdf.Malware.Agent-9909941-0
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://ieuicufioao.myhome.cx/8555552554550/Sacrifice-The-Chosen-3-by-Denise-Grover-Swank.pdf
    • http://ieuicufioao.myhome.cx/8556557550555557/Always-You-Bachelor-Brotherhood-3-by-Denise-Grover-Swank.pdf
    • http://ieuicufioao.myhome.cx/1554556558554552/The-Gambler-The-Wedding-Pact-3-by-Denise-Grover-Swank.pdf
    • http://ieuicufioao.myhome.cx/3554556559553556/The-Player-The-Wedding-Pact-2-by-Denise-Grover-Swank.pdf
    • http://ieuicufioao.myhome.cx/1554557550558555/Twenty-Eight-and-a-Half-Wishes-Rose-Gardner-Mystery-1-by-Denise-Grover-Swank.pdf
    • http://ieuicufioao.myhome.cx/2550552551555557/Thirty-Four-and-a-Half-Predicaments-Bonus-Chapters-Rose-Gardner-Mystery-7-5-by-Denise-Grover-Swank.pdf
    • http://ieuicufioao.myhome.cx/4558550557555550/Rose-and-Helena-Save-Christmas-Ghost-in-Law-6-5-Rose-Gardner-Mystery-6-4-by-Denise-Grover-Swank.pdf
    • http://ieuicufioao.myhome.cx/1553554558555551/The-Curse-Keepers-The-Curse-Keepers-1-by-Denise-Grover-Swank.pdf
    • http://ieuicufioao.myhome.cx/9559554552554558/Mr-New-York-The-Autobiography-of-Grover-A-Whalen-by-Grover-Aloysius-Whalen.pdf
    • http://ieuicufioao.myhome.cx/1550556557558554/Bridal-Sacrifice-Sacrifice-1-by-Alisonswan.pdf
    • http://ieuicufioao.myhome.cx/3558550554558552/Chosen-By-The-Karal-The-Complete-Series-Chosen-by-the-Karal-1-5-by-Harmony-Raines.pdf
    • http://ieuicufioao.myhome.cx/1550556553551553551/Vom-Vampir-gefickt-und-gebissen-Non-Human-NonHuman-Geschichten-von-Denise-Lagarde-German-Edition-by-Denise-Lagarde.pdf
    • http://ieuicufioao.myhome.cx/4557555559558556/The-End-of-My-Career-by-Martha-Grover.pdf
    • http://ieuicufioao.myhome.cx/2551555550557550/Ali-and-the-Golden-Eagle-by-Wayne-Grover.pdf
    • http://ieuicufioao.myhome.cx/6555551555554554/The-Enemy-s-Daughter-by-Tiana-Grover.pdf
    • http://ieuicufioao.myhome.cx/1559550550550556/The-Dance-Boots-by-Linda-LeGarde-Grover.pdf
    • http://ieuicufioao.myhome.cx/3552557552551555/Play-With-Me-Grover-Beach-Team-1-by-Piper-Shelly.pdf
    • http://ieuicufioao.myhome.cx/4556550550/The-Odds-of-Loving-Grover-Cleveland-by-Rebekah-Crane.pdf
    • http://ieuicufioao.myhome.cx/1559558551556554/Ryan-Hunter-Grover-Beach-Team-2-by-Piper-Shelly.pdf
    • http://ieuicufioao.myhome.cx/1559558558556556/The-Trouble-With-Dating-Sue-Grover-Beach-Team-6-by-Anna-Katmore.pdf
    • http://ieuicufioao.myhome.cx/15535

Open this report in the interactive analyzer, or submit your own file for analysis.