Malicious PDF — malware analysis report

Static analysis result for SHA-256 29593aa0e73f73eb…

MALICIOUS

PDF

30.7 KB Created: 2020-03-18 22:42:52 +00:00 Authoring application: mPDF 5.7
MD5: 62588996f82589b17934de63ae0dbacd SHA-1: 4de965825acb4152e24d030b39bef7bc56345f78 SHA-256: 29593aa0e73f73eb83b913bd38a077176af516c4b352c6a8146ec4ae4d1d7e26
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1204.002 Malicious Link

The PDF file contains a large number of embedded URLs pointing to external PDF documents on the domain 'calistazz.myhome.cx'. This is indicative of a link farm, likely used for SEO poisoning or to distribute malicious content. The document body is heavily obfuscated, preventing a clear understanding of its immediate purpose beyond hosting these links. No scripts were extracted from this sample.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://calistazz.myhome.cx/1860866861862866867/Georg-Daniel-Fuchs-Bibliothek-Der-Kirchenversammlungen-Des-Vierten-Und-F-nften-Jahrhunderts-in-Uebersezungen-Und-Ausz-gen-Aus-Ihren-Akten-Und-Andern-Dahin-Geh-rigen-Schriften-by-Bibliothek.pdf
    • http://calistazz.myhome.cx/1861866869860869867/Moses-Mendelssohn-Gesammelte-Schriften-Jubilaumsausgabe-Band-5-2-Rezensionsartikel-in-Allgemeine-Deutsche-Bibliothek-1765-1784-Literarische-Fragmente-by-Moses-Mendelssohn.pdf
    • http://calistazz.myhome.cx/1861868864865862860/Anleitung-Zur-Anfertigung-Von-Referaten-Wissenschaftlichen-Arbeiten-Anklageschriften-Und-Akten-Ausz-gen-in-Begnadigungssachen-Mit-Einer-Sammlung-Von-Beispielen-by-Schering.pdf
    • http://calistazz.myhome.cx/1860866866861862863/Die-Tote-in-der-Bibliothek-by-Agatha-Christie.pdf
    • http://calistazz.myhome.cx/1861862868862869865/W-rde-und-Eigensinn-Bibliothek-der-Gef-hle-7-by-Udo-Baer.pdf
    • http://calistazz.myhome.cx/1860866861861862868/Macbeth-Reclams-Universal-Bibliothek-by-William-Shakespeare.pdf
    • http://calistazz.myhome.cx/1860868865861865860/Die-Reise-mit-der-gestohlenen-Bibliothek-Roman-by-David-Whitehouse.pdf
    • http://calistazz.myhome.cx/1860869862866860863/Kostbarkeiten-Der-Herzogin-Anna-Amalia-Bibliothek-Weimar-by-Udo-Worffel.pdf
    • http://calistazz.myhome.cx/9866861866869861/Die-Herzoglich-Anhaltische-Behorden-Bibliothek-in-Dessau-by-Wilhelm-Kulpe.pdf
    • http://calistazz.myhome.cx/8869863862869861/Romantische-Bibliothek---Folge-9-Sie-fanden-ein-neues-Zuhause-by-Paula-Mai.pdf
    • http://calistazz.myhome.cx/1860866861862862864/Erste-Einleitung-in-die-Kritik-der-Urteilskraft-Philosophische-Bibliothek-39b-by-Immanuel-Kant.pdf
    • http://calistazz.myhome.cx/9864861863868866/Dialoge-ber-nat-rliche-Religion-Philosophische-Bibliothek-658-by-David-Hume.pdf
    • http://calistazz.myhome.cx/1860864865860869860/Gedanken-in-Der-Bibliothek-Essays-Uber-Die-Literaturen-Europas-by-Antal-Szerb.pdf
    • http://calistazz.myhome.cx/1860860866866862865/Leben-und-Meinungen-ber-hmter-Philosophen-Philosophische-Bibliothek-674-by-Laertius-Diogenes.pdf
    • http://calistazz.myhome.cx/1861860860866865860/Bibliotheca-Patrum-Latinorum-Italica-Vol-2-Erstes-Heft-III-Die-Ambrosianische-Bibliothek-in-Mailand-by-August-Reifferscheid.pdf
    • http://calistazz.myhome.cx/8868869861869862/Miss-Rondels-Lupinen---DuMonts-Digitale-Kriminal-Bibliothek-Professor-Shandy-ermittelt-by-Charlotte-MacLeod.pdf
    • http://calistazz.myhome.cx/9861861866865863/Prolegomena-zu-einer-jeden-k-nftigen-Metaphysik-die-als-Wissenschaft-wird-auftreten-k-nnen-Philosophische-Bibliothek-540-by-Immanuel-Kant.pdf
    • http://calistazz.myhome.cx/9865868865862868/F-nf-Miss-Marple-Krimis-Mord-im-Pfarrhaus-16-Uhr-50-ab-Paddington-Bertrams-Hotel-Die-Tote-in-der-Bibliothek-Fata-Morgana-by-Agatha-Christie.pdf
    • http://calistazz.myhome.cx/1861865866862869861/Getreue-Kirchendiener---Gefahrdete-Pfarrherren-Deutschschweizer-Pradikanten-Des-17-Jahrhunderts-in-Ihren-Lebensbeschreibungen-by-Lorenz-Heiligensetzer.pdf
    • http://calistazz.myhome.cx/1860862862865869864/Genua-Und-Die-Machte-Am-Mittelmeer-1257-1311-Ein-Beitrag-Zur-Geschichte-Des-13-Jahrhunderts-by-Georg-Caro.pdf
    • http://calistazz.myhome.cx/18

Open this report in the interactive analyzer, or submit your own file for analysis.