Malicious PDF — malware analysis report

Static analysis result for SHA-256 30d0aa4acc373409…

MALICIOUS

PDF

15.1 KB Created: 2019-04-30 05:48:16 +01:00 Authoring application: mPDF 5.7
MD5: 82729801847f725428f524e09aff25ac SHA-1: d13dd8d220f68fbd9360806ddd763e752edd532e SHA-256: 30d0aa4acc373409e294efda0fa0c6562c5bbbe15543b5dcdc761b20f27f2853
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF file contains a large number of embedded links, identified by the PDF_SEO_LINK_FARM heuristic. These links point to various PDF files hosted on loaminoo.linkpc.net. While the individual linked PDFs are marked as benign, the sheer volume and nature of these links suggest a link farm or traffic-driving scheme, which is a common precursor to malicious activity. No scripts were extracted from this sample.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/4091094093092094/Fight-For-Love-Brothers-in-Arms-12-by-Samantha-Kane.pdf
    • http://loaminoo.linkpc.net/3090097098090094/At-Love-s-Command-Brothers-in-Arms-4-by-Samantha-Kane.pdf
    • http://loaminoo.linkpc.net/3096097092090099/Love-in-Exile-Brothers-in-Arms-6-by-Samantha-Kane.pdf
    • http://loaminoo.linkpc.net/2090095098092093/Love-and-War-The-Beginning-Brothers-in-Arms-0-5-by-Samantha-Kane.pdf
    • http://loaminoo.linkpc.net/4094099095090094/Devil-In-My-Arms-The-Saint-s-Devils-3-by-Samantha-Kane.pdf
    • http://loaminoo.linkpc.net/5090091095096090/Love-Walks-In-The-Shaughnessy-Brothers-2-by-Samantha-Chase.pdf
    • http://loaminoo.linkpc.net/8098098092094092/Rotk-ppchen-und-der-b-se-Wolfgang---Samantha-Love-Erotik-amp-BDSM-Collection-by-Samantha-Love.pdf
    • http://loaminoo.linkpc.net/4097098093099092/Islands-by-Samantha-Kane.pdf
    • http://loaminoo.linkpc.net/2093090092093093/Samantha-by-Andrea-Kane.pdf
    • http://loaminoo.linkpc.net/3095097091094097/Gift-of-Desire-by-Samantha-Kane.pdf
    • http://loaminoo.linkpc.net/4095090094094091/Calling-the-Play-Birmingham-Rebels-2-by-Samantha-Kane.pdf
    • http://loaminoo.linkpc.net/1099097090093096/The-Devil-s-Thief-The-Saint-s-Devils-1-by-Samantha-Kane.pdf
    • http://loaminoo.linkpc.net/4096097091098096/Safe-Love-A-Love-Brothers-Companion-Novella-Love-Brothers-1-5-by-Liz-Crowe.pdf
    • http://loaminoo.linkpc.net/1098090093094092/Brothers-In-Arms-Sidekick-2-by-Pab-Sungenis.pdf
    • http://loaminoo.linkpc.net/3090090091093096/Brothers-in-Arms-The-Becoming-1-5-by-Jessica-Meigs.pdf
    • http://loaminoo.linkpc.net/7097097097097099/Tyson-Caine-Brothers-in-Arms-1-by-Aleya-Michelle.pdf
    • http://loaminoo.linkpc.net/4097095092091098/The-Unwilling-Bride-Brothers-in-Arms-3-by-Margaret-Moore.pdf
    • http://loaminoo.linkpc.net/1096097090097097/Brothers-In-Arms-Recon-Diaries-1-by-Kendall-McKenna.pdf
    • http://loaminoo.linkpc.net/4097095091094093/Lord-of-Dunkeathe-Brothers-in-Arms-2-by-Margaret-Moore.pdf
    • http://loaminoo.linkpc.net/4097094091091098/Brothers-In-Arms-Recon-Diaries-1-by-Kendall-McKenna.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.