Malicious PDF — malware analysis report

Static analysis result for SHA-256 2e67d8c4823c3f18…

MALICIOUS

PDF

15.7 KB Created: 2019-04-30 02:44:53 +01:00 Authoring application: mPDF 5.7
MD5: 81cdfbd2ceb19b587d35efad565f4ba7 SHA-1: 22a8bc904b00118ba6c632a01bc5f4708b70023c SHA-256: 2e67d8c4823c3f180c08385e1cf8fe62a3716bf8ae99fb002379c88a3c28a4df
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF contains a large number of embedded URLs pointing to external PDF files, a technique often used for SEO poisoning or to distribute malicious content. The heuristic 'PDF_SEO_LINK_FARM' indicates a mass external link farm, with the dominant host being 'loaminoo.linkpc.net'. No scripts were extracted from this sample. The document body was unreadable, preventing a more specific assessment of the lure.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/1092093096097098/Perfection-Perfection-1-by-J-L-Spelbring.pdf
    • http://loaminoo.linkpc.net/4098096099094095/Merry-Mitchell-Affair-The-Mitchell-Healy-Family-3-5-by-Jennifer-Foor.pdf
    • http://loaminoo.linkpc.net/4094093091096097/Chasing-Perfection-Vol-IV-Chasing-Perfection-4-by-M-S-Parker.pdf
    • http://loaminoo.linkpc.net/4095093090094097/Chasing-Perfection-Vol-II-Chasing-Perfection-2-by-M-S-Parker.pdf
    • http://loaminoo.linkpc.net/4095093091094098/Chasing-Perfection-Vol-III-Chasing-Perfection-3-by-M-S-Parker.pdf
    • http://loaminoo.linkpc.net/4097095090096099/Rachel-s-Eyes-Eyes-of-Silver-Revisited-1-by-Ellen-O-39-Connell.pdf
    • http://loaminoo.linkpc.net/7092097097097090/3x3-Eyes-Descent-of-the-Mystic-City-3x3-Eyes-8-by-Yuzo-Takada.pdf
    • http://loaminoo.linkpc.net/1092095091099095/Phantom-Eyes-Witch-Eyes-3-by-Scott-Tracey.pdf
    • http://loaminoo.linkpc.net/3091093092097094/One-Eye-Two-Eyes-Three-Eyes-A-Hutzul-Tale-by-Eric-A-Kimmel.pdf
    • http://loaminoo.linkpc.net/3091090093097095/Beyond-the-Eyes-Beyond-the-Eyes-1-by-Rebekkah-Ford.pdf
    • http://loaminoo.linkpc.net/4095093091096095/The-Mitchell-Family-Series-Box-Set-Mitchell-Family-1-4-5-by-Jennifer-Foor.pdf
    • http://loaminoo.linkpc.net/3097098098098/The-Legend-of-the-Blue-Eyes-Blue-Eyes-Trilogy-1-by-B-Kristin-McMichael.pdf
    • http://loaminoo.linkpc.net/6092099097095093/Perfection-1-by-Claire-Adams.pdf
    • http://loaminoo.linkpc.net/7093090090094/The-Way-of-Perfection-by-Teresa-of-vila.pdf
    • http://loaminoo.linkpc.net/5096097093099/Hooked-Clasps-amp-Eyes-A-Classification-amp-Catalogue-of-Sharp--Or-Blunt-Hooked-Clasps-amp-Miscellaneous-Objects-with-Hooks-Eyes-Loops-Rings-or-Toggles-by-Brian-Read.pdf
    • http://loaminoo.linkpc.net/6094091094094099/Simple-Perfection-by-Abbi-Glines.pdf
    • http://loaminoo.linkpc.net/2096092091092090/Absolute-Perfection-by-Stephanie-Burke.pdf
    • http://loaminoo.linkpc.net/3095094092093092/Tempting-Perfection-by-Kristin-Mayer.pdf
    • http://loaminoo.linkpc.net/2091094096096099/Meditation-Man-perfection-in-God-satisfaction-by-Sri-Chinmoy.pdf
    • http://loaminoo.linkpc.net/3096097094097095/Perfection-Eternally-Three-1-by-Kris-Cook.pdf
    • http://loaminoo.linkpc.net/10

Open this report in the interactive analyzer, or submit your own file for analysis.