Malicious PDF — malware analysis report

Static analysis result for SHA-256 2a357c607a7a843d…

MALICIOUS

PDF

17.4 KB Created: 2019-08-02 07:38:12 +01:00 Authoring application: mPDF 5.7
MD5: 7a1cb4c71595f4eeb0feac0289212d49 SHA-1: 5d8d172f75cfae89e44ba3e72720ca432320ed7d SHA-256: 2a357c607a7a843d4d65ed0f90cf6c7c712cc706fc02f057c26eb307504cd847
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF file contains a large number of embedded links to external PDF documents, a technique often used for SEO poisoning or to distribute malicious content. The heuristic 'PDF_SEO_LINK_FARM' specifically flags this behavior. While the document body is heavily corrupted, the presence of numerous URLs suggests a malicious intent to redirect users to potentially harmful content hosted on 'cefasfese.4pu.com'. No scripts were extracted from this sample.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/2738734739738733/Protecting-His-Assets-Bad-Boy-Bosses-2-by-J-K-Coi.pdf
    • http://cefasfese.4pu.com/1736738736737731/Protecting-His-Assets-Bad-Boy-Bosses-2-by-J-K-Coi.pdf
    • http://cefasfese.4pu.com/4737736737735735/Protecting-His-Assets-Deuces-Wild-1-by-Cari-Quinn.pdf
    • http://cefasfese.4pu.com/7730734734738737/In-Bed-with-the-Competition-Bad-Boy-Bosses-1-by-J-K-Coi.pdf
    • http://cefasfese.4pu.com/2739736739735731/Bare-Assets-by-M-L-Stephens.pdf
    • http://cefasfese.4pu.com/2735738739737731/Current-Assets-by-Arleen-Alleman.pdf
    • http://cefasfese.4pu.com/3730739734732730/Personal-Assets-by-Emma-Holly.pdf
    • http://cefasfese.4pu.com/9732734734737731/Who-s-the-Boss-Now-Managing-the-Bosses-3-by-Lexy-Timms.pdf
    • http://cefasfese.4pu.com/3732739738731734/Freedom-from-Bosses-Forever-by-Tony-Robinson.pdf
    • http://cefasfese.4pu.com/2736730735734731/Controlling-Krysta-Hot-Texas-Bosses-2-by-Lyla-Sinclair.pdf
    • http://cefasfese.4pu.com/2736730735734732/Training-Tessa-Hot-Texas-Bosses-1-by-Lyla-Sinclair.pdf
    • http://cefasfese.4pu.com/4736731733736733/Illuminati-Roundtable-of-the-Bosses-The-Cartel-7-by-Ashley-Antoinette.pdf
    • http://cefasfese.4pu.com/6732735734733/Personal-Assets-Texas-Nights-1-by-Kelsey-Browning.pdf
    • http://cefasfese.4pu.com/6731735731737733/Cover-Your-Assets-Tucker-Sinclair-2-by-Patricia-Smiley.pdf
    • http://cefasfese.4pu.com/9732734736732731/Senior-Advisor-to-the-Boss-Managing-the-Bosses-9-by-Lexy-Timms.pdf
    • http://cefasfese.4pu.com/1730737736732733732/Estimated-Useful-Lives-of-Depreciable-Hospital-Assets-by-George-S-Arges.pdf
    • http://cefasfese.4pu.com/5738731736734732/Leveraging-Knowledge-Based-Assets-The-New-Value-Equation-to-Create-Competitive-Advantage-by-Marius-Ungerer.pdf
    • http://cefasfese.4pu.com/4732733732735738/The-Good-Girls-Revolt-How-the-Women-of-Newsweek-Sued-their-Bosses-and-Changed-the-Workplace-by-Lynn-Povich.pdf
    • http://cefasfese.4pu.com/3733730733733732/The-Collapse-of-the-Dollar-and-How-to-Profit-from-It-Make-a-Fortune-by-Investing-in-Gold-and-Other-Hard-Assets-by-John-Rubino.pdf
    • http://cefasfese.4pu.com/3738737734732737/Protecting-Their-Mate-Part-Five-by-Mia-Thorne.pdf
    • http://cefasfese.4pu.com/4736731733736733/Illuminati-Roundtable-of-the-Bosses-The-Cartel-7-by-Ashley-Antoin

Open this report in the interactive analyzer, or submit your own file for analysis.