Malicious PDF — malware analysis report

Static analysis result for SHA-256 388d9e871b96113e…

MALICIOUS

PDF

16.8 KB Created: 2019-05-07 03:10:46 +01:00 Authoring application: mPDF 5.7
MD5: 498140530c4015d66a121bb6aeb06727 SHA-1: 4cd774404d1b93a376a5c08064cb3df3055e2fab SHA-256: 388d9e871b96113e7421f6489b54a69f2f72692f18b2771af331b8090505e8b6
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1204.002 Malicious Link

The PDF contains a large number of embedded URLs, identified by the PDF_SEO_LINK_FARM heuristic. These URLs point to various book titles hosted on loaminoo.linkpc.net. While the URLs themselves are marked as benign, the sheer volume and nature of the link farm suggest a malicious intent, possibly for SEO manipulation or to indirectly host malicious content. No scripts were extracted from this sample.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/1095099097094097/Believe-Me-A-Memoir-of-Love-Death-and-Jazz-Chickens-by-Eddie-Izzard.pdf
    • http://loaminoo.linkpc.net/1094090098093092/Cheating-Death-Stealing-Life-The-Eddie-Guerrero-Story-by-Eddie-Guerrero.pdf
    • http://loaminoo.linkpc.net/1090091091090098090/Making-Money-With-Chickens-How-to-make-up-to-12k-a-year-with-just-15-chickens-by-Lisa-Murano.pdf
    • http://loaminoo.linkpc.net/4099096096091094/Remembering-Bix-A-Memoir-Of-The-Jazz-Age-by-Ralph-Berton.pdf
    • http://loaminoo.linkpc.net/3091096093095098/Love-s-Wicked-Game-A-Provocative-Persuasive-Story-of-Love-Lust-and-Money-by-Eddie-Johnson.pdf
    • http://loaminoo.linkpc.net/9093090097096093/For-the-Love-of-Chickens-Lessons-in-Farming-from-an-Urbanite-by-Patricia-Ten-Haaf.pdf
    • http://loaminoo.linkpc.net/3095095099098096/Death-s-Dark-Memoir-Fabulous-Death-2-by-Avery-Taylor-Adams.pdf
    • http://loaminoo.linkpc.net/4091094090098093/Eddie-Eddie-amp-Shadow-1-by-Skylar-Jaye.pdf
    • http://loaminoo.linkpc.net/2090091090094094/Tempting-Love-Haley-amp-Eddie-Crossroads-5-by-Melanie-Shawn.pdf
    • http://loaminoo.linkpc.net/2095098098090097/For-the-Love-of-Jazz-by-Elke-Feuer.pdf
    • http://loaminoo.linkpc.net/3091094093096099/Widders-s-Landing-Life-amp-Love-on-the-Kentucky-Frontier-by-Eddie-Price.pdf
    • http://loaminoo.linkpc.net/5090093091090/Love-life-amp-all-that-jazz-by-Ahmed-Faiyaz.pdf
    • http://loaminoo.linkpc.net/9099099092097/Soul-Jazz-Jazz-in-the-Black-Community-1945-1975-by-Bob-Porter.pdf
    • http://loaminoo.linkpc.net/9096097092091098/Where-is-Jazz-D-nde-est-Jazz-by-Mar-a-Luisa-Retana.pdf
    • http://loaminoo.linkpc.net/2097093095091093/Being-Jazz-My-Life-as-a-Transgender-Teen-by-Jazz-Jennings.pdf
    • http://loaminoo.linkpc.net/4094091091094093/Eddie-Trunk-s-Essential-Hard-Rock-and-Heavy-Metal-by-Eddie-Trunk.pdf
    • http://loaminoo.linkpc.net/2099090093098/Love-at-First-Hike-A-Memoir-about-Love-amp-Triumph-on-the-Appalachian-Trail-by-Michelle-Pugh.pdf
    • http://loaminoo.linkpc.net/4096095093099099/Eddie-Bear-Private-Detective-Eddie-Bear-1-2-by-Robert-Rankin.pdf
    • http://loaminoo.linkpc.net/4090094095098094/Big-Sex-Little-Death-A-Memoir-by-Susie-Bright.pdf
    • http://loaminoo.linkpc.net/5091096099098090/Memoir-of-a-Good-Death-by-Anne-Sorbie.pdf
    • http://loaminoo.linkpc.net/2090091090094

Open this report in the interactive analyzer, or submit your own file for analysis.