Malicious PDF — malware analysis report

Static analysis result for SHA-256 2e30219660a52c1f…

MALICIOUS

PDF

19.0 KB Created: 2019-05-03 05:05:28 +01:00 Authoring application: mPDF 5.7
MD5: 5b97e0271589db6a0256ded538bf263d SHA-1: efc7be4832784f353b61ae585696e596b8b55755 SHA-256: 2e30219660a52c1fd87544c7cd6cc7e566928d6233f8a35ffcb03b960f783dd9
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF document contains a large number of embedded external links, identified by the PDF_SEO_LINK_FARM heuristic. While many of these links were individually classified as benign, the sheer volume and the nature of the heuristic suggest a malicious intent, possibly for SEO manipulation or to distribute further payloads. No scripts were extracted from this sample.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/4092097095090094/A-Second-Treasury-of-the-World-s-Greatest-Fairy-Tales-Book-2-by-Helen-Hyman.pdf
    • http://loaminoo.linkpc.net/4092097095090093/A-Treasury-of-the-World-s-Greatest-Fairy-Tales-Book-1-by-Helen-Hyman.pdf
    • http://loaminoo.linkpc.net/3098091093099097/Footnotes-from-the-World-s-Greatest-Bookstores-True-Tales-and-Lost-Moments-from-Book-Buyers-Booksellers-and-Book-Lovers-by-Bob-Eckstein.pdf
    • http://loaminoo.linkpc.net/4093098098094091/The-Outspoken-Princess-and-The-Gentle-Knight-A-Treasury-of-Modern-Fairy-Tales-by-Jack-D-Zipes.pdf
    • http://loaminoo.linkpc.net/4099097091094091/True-Heroes-A-Treasury-of-Modern-day-Fairy-Tales-Written-by-Best-Selling-Authors-by-Jonathan-Diaz.pdf
    • http://loaminoo.linkpc.net/3090090094096096/The-World-s-Best-Fairy-Tales-by-Belle-Becker-Sideman.pdf
    • http://loaminoo.linkpc.net/7092093099092/The-World-s-Best-Fairy-Tales-by-Belle-Becker-Sideman.pdf
    • http://loaminoo.linkpc.net/3095094096098098/The-World-s-Best-Fairy-Tales-Volume-2-by-Belle-Becker-Sideman.pdf
    • http://loaminoo.linkpc.net/2093098094092093/The-Golden-Book-of-Fairy-Tales-by-Adrienne-Segur.pdf
    • http://loaminoo.linkpc.net/5092097096094090/The-Kingfisher-Book-of-Fairy-Tales-by-Vivian-French.pdf
    • http://loaminoo.linkpc.net/2099090091090096/The-Mammoth-Book-of-Fairy-Tales-by-Mike-Ashley.pdf
    • http://loaminoo.linkpc.net/5096092095091095/The-Pizza-Book-Everything-There-Is-To-Know-About-the-World-s-Greatest-Pie-by-Evelyne-Slomon.pdf
    • http://loaminoo.linkpc.net/3090090094097095/Dean-s-A-Book-of-Fairy-Tales-by-Janet-Grahame-Johnstone.pdf
    • http://loaminoo.linkpc.net/9099098095098098/The-Magic-Bed-A-Book-of-East-Indian-Fairy-Tales-by-Hartwell-James.pdf
    • http://loaminoo.linkpc.net/9099098095092097/The-Enchanted-Castle-a-Book-of-Fairy-Tales-from-Flowerland-by-Hartwell-James.pdf
    • http://loaminoo.linkpc.net/8090098093099098/Sweet-Tales-The-Adventures-of-Miss-Jade-amp-Britt-the-Kit-by-Laurie-Hyman.pdf
    • http://loaminoo.linkpc.net/8094091093094092/New-Larousse-Gastronomique-The-World-s-Greatest-Cookery-Reference-Book-by-Janet-Dunbar.pdf
    • http://loaminoo.linkpc.net/1090095095096092090/Elsa-Queen-of-the-Elves-and-Other-Stories-The-Golden-Book-of-Fairy-Tales-by-Christl-Vogl.pdf
    • http://loaminoo.linkpc.net/7094091099097092/Unexpected-Gift---Cali-s-Story-Christmas-Fairy-Tales-Book-1-by-Chantel-Rhondeau.pdf
    • http://loaminoo.linkpc.net/4091094097098094/Americana-Fairy-Tale-Fairy-Tales-of-the-Open-Road-1-by-Lex-Chase.pdf
    • http://loaminoo.linkpc.net/30900900940960

Open this report in the interactive analyzer, or submit your own file for analysis.