Malicious PDF — malware analysis report

Static analysis result for SHA-256 353a8ba738cfc459…

MALICIOUS

PDF

16.7 KB Created: 2019-04-30 05:37:33 +01:00 Authoring application: mPDF 5.7
MD5: 556efd19c4a9be5c876d925056bb88c9 SHA-1: 0ec03b03e8016acf84a737f2a9c8646f764700e5 SHA-256: 353a8ba738cfc459275137b78024515b5566d775f66c10f3fe62736e3de94dfe
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF document contains a large number of embedded URLs, constituting a link farm. The primary heuristic indicates this is a critical finding, suggesting a malicious intent to direct users to external content. No scripts were extracted from this sample, and the document body was heavily obfuscated, limiting further analysis of the specific lure.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/9098098097090098/In-the-Eye-of-the-Storm-The-Callahans-2-by-Jennifer-Hayden.pdf
    • http://loaminoo.linkpc.net/9098098098090091/Desert-Heat-The-Callahans-5-by-Jennifer-Hayden.pdf
    • http://loaminoo.linkpc.net/2098096094097090/The-Storm-Dragon-s-Heart-Storm-Phase-1-by-David-Alastair-Hayden.pdf
    • http://loaminoo.linkpc.net/2094094090093095/The-Storm-Makers-by-Jennifer-E-Smith.pdf
    • http://loaminoo.linkpc.net/7098098093092/Taken-by-Storm-Raised-by-Wolves-3-by-Jennifer-Lynn-Barnes.pdf
    • http://loaminoo.linkpc.net/4092097093099092/Storm-and-Fury-The-Dark-Elements-4-by-Jennifer-L-Armentrout.pdf
    • http://loaminoo.linkpc.net/9098098097090099/Kyle-The-Callahans-4-by-Glenna-Sinclair.pdf
    • http://loaminoo.linkpc.net/1096096093097094/Secret-Sins-The-Callahans-3-by-Lora-Leigh.pdf
    • http://loaminoo.linkpc.net/1090090092096094092/Die-Zeitreisenden-in-Callahans-Saloon-by-Spider-Robinson.pdf
    • http://loaminoo.linkpc.net/1098098098092093/Magic-In-The-Storm-Storm-3-by-Meredith-Bond.pdf
    • http://loaminoo.linkpc.net/1094098098090090/Storm-MC-Collection-Storm-MC-1-3-2-5-by-Nina-Levine.pdf
    • http://loaminoo.linkpc.net/4093092091098/In-the-Eye-of-the-Storm-Storm-and-Silence-2-by-Robert-Thier.pdf
    • http://loaminoo.linkpc.net/5090090094097093/Wethering-the-Storm-The-Storm-2-by-Samantha-Towle.pdf
    • http://loaminoo.linkpc.net/2091090093093098/Taken-by-Storm-Taken-by-Storm-1-by-Angela-Morrison.pdf
    • http://loaminoo.linkpc.net/1090093096095097098/Aquis-Submersis-und-Immensee---Zwei-Novellen-von-Theodor-Storm-by-Theodor-Storm.pdf
    • http://loaminoo.linkpc.net/1090093096095099091/Theodor-Storm-Novellen-M-rchen-Gedichte-amp-Briefe-ber-400-Titel-in-einem-Band-Der-Schimmelreiter-Der-kleine-H-welmann-Immensee-Pole-Poppensp-ler-Marthe-und-ihre-Uhr-by-Theodor-Storm.pdf
    • http://loaminoo.linkpc.net/4098098094090099/Just-Another-Kid-by-Torey-L-Hayden.pdf
    • http://loaminoo.linkpc.net/1099091096094091/Somebody-Else-s-Kids-by-Torey-L-Hayden.pdf
    • http://loaminoo.linkpc.net/3095094095094094/Hayden-Four-Sons-2-by-J-D-Hollyfield.pdf
    • http://loaminoo.linkpc.net/3095096095091097/Banshee-by-Hayden-Thorne.pdf
    • http://loaminoo.linkpc.net/4093092091098/In-the-Eye-of-the-Storm

Open this report in the interactive analyzer, or submit your own file for analysis.