Malicious PDF — malware analysis report

Static analysis result for SHA-256 282c167426c23658…

MALICIOUS

PDF

16.3 KB Created: 2019-05-03 20:22:11 +01:00 Authoring application: mPDF 5.7
MD5: 426f0259c2803dfe37aa4caa354ffaf5 SHA-1: 7bbf9901461dd6d5bfe5b69670b3fe217dbe8a69 SHA-256: 282c167426c236584d3541f1d00ba4cdc826c7ae937a336601f1678fe6eb740c
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF document contains a large number of embedded URLs, identified by the PDF_SEO_LINK_FARM heuristic. While the extracted URLs themselves are labeled as confirmed_benign, the sheer volume and structure suggest a malicious intent, possibly for SEO manipulation or as a distribution point for further malicious content. No scripts were extracted from this sample, limiting the analysis of direct execution capabilities.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/8732733737734/Land-of-Shadows-The-Legend-of-the-Gate-Keeper-1-by-Jeff-Gunzel.pdf
    • http://cefasfese.4pu.com/3738734735738730/The-Cold-Cold-Ground-Detective-Sean-Duffy-1-by-Adrian-McKinty.pdf
    • http://cefasfese.4pu.com/4738734737739738/The-Cold-Cold-Ground-Detective-Sean-Duffy-1-by-Adrian-McKinty.pdf
    • http://cefasfese.4pu.com/4731735738737732/Cold-Blooded-Cold-Justice-9-by-Toni-Anderson.pdf
    • http://cefasfese.4pu.com/2739734735736738/Cold-Blooded-Cold-Justice-9-by-Toni-Anderson.pdf
    • http://cefasfese.4pu.com/3731738739733734/Cold-Fear-Cold-Justice-4-by-Toni-Anderson.pdf
    • http://cefasfese.4pu.com/4731734737737736/In-From-the-Cold-Cold-Country-1-by-Mercy-Celeste.pdf
    • http://cefasfese.4pu.com/3735736731731739/Cold-Stone-Cold-Fox-Trilogy-2-by-Max-Monroe.pdf
    • http://cefasfese.4pu.com/9735738738732736/The-Book-Of-Lost-Places-The-Selected-Works-Of-Jeff-Wander-Meer-by-Jeff-VanderMeer.pdf
    • http://cefasfese.4pu.com/1732737739737735/Stealing-Shadows-Bishop-Special-Crimes-Unit-1-Shadows-1-by-Kay-Hooper.pdf
    • http://cefasfese.4pu.com/9737738738732/The-Legend-of-Faro-A-Tale-of-Two-Shadows-Shadows-of-Man-Book-1-by-Christopher-Ojinaka.pdf
    • http://cefasfese.4pu.com/3730733734733732/Secrets-in-the-Shadows-Shadows-Collection-Leroy-s-Sins-1-by-T-L-Haddix.pdf
    • http://cefasfese.4pu.com/3730734738731736/Shadows-from-the-Grave-Shadows-Collection-Leroy-s-Sins-3-by-T-L-Haddix.pdf
    • http://cefasfese.4pu.com/2730730735738738/Hidden-in-the-Shadows-Shadows-Collection-Leroy-s-Sins-4-by-T-L-Haddix.pdf
    • http://cefasfese.4pu.com/9736735735738/Defying-Shadows-Rising-Shadows-3-by-Ashley-Townsend.pdf
    • http://cefasfese.4pu.com/9733735738736/Chasing-Shadows-Rising-Shadows-2-by-Ashley-Townsend.pdf
    • http://cefasfese.4pu.com/1730739730738733733/Shadows-of-Deceit-A-Series-of-Shadows-2-by-Mell-Corcoran.pdf
    • http://cefasfese.4pu.com/5733733730731733/The-Cold-Sore-Cure-How-To-Cure-Cold-Sores-And-Prevent-Them-From-Coming-Back-by-Eric-Johnson.pdf
    • http://cefasfese.4pu.com/4734732738737730/Cold-as-Ice-Cold-as-Ice-1-by-Charles-Sheffield.pdf
    • http://cefasfese.4pu.com/2735736731736738/Cold-Cold-1-by-Brandon-Shire.pdf
    • http://cefasfese.4pu.com/1732737739737

Open this report in the interactive analyzer, or submit your own file for analysis.