Malicious PDF — malware analysis report

Static analysis result for SHA-256 42f92b57ae89409e…

MALICIOUS

PDF

16.8 KB Created: 2019-05-07 08:40:51 +01:00 Authoring application: mPDF 5.7
MD5: 6e140e1574f58b1bb04869657992d309 SHA-1: 1c8132df4e72b1e4f09d25aa97c60f50811ff565 SHA-256: 42f92b57ae89409ec406eb6aca9c0e5ceecf8ec9a09f79ea00c201e58dbe3f45
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF file contains a large number of embedded URLs, as indicated by the PDF_SEO_LINK_FARM heuristic. These URLs point to various book titles hosted on the 'loaminoo.linkpc.net' domain. While the URLs themselves are marked as benign, the sheer volume and structure suggest a link farm or SEO manipulation tactic, which can be used to distribute malicious content or improve the ranking of malicious sites. No scripts were extracted from this sample.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/2098096095097/Autumn-in-the-City-of-Angels-Autumn-1-by-Kirby-Howell.pdf
    • http://loaminoo.linkpc.net/7094098092096/The-Dalemark-Quartet-Vol-1-Cart-and-Cwidder-amp-Drowned-Ammet-The-Dalemark-Quartet-1-2-by-Diana-Wynne-Jones.pdf
    • http://loaminoo.linkpc.net/3093090093096093/Autumn-Autumn-1-by-David-Moody.pdf
    • http://loaminoo.linkpc.net/2090096099095099/Autumn-Autumn-1-by-David-Moody.pdf
    • http://loaminoo.linkpc.net/7095096092091/The-Dalemark-Quartet-Vol-2-The-Spellcoats-amp-The-Crown-of-Dalemark-The-Dalemark-Quartet-3-4-by-Diana-Wynne-Jones.pdf
    • http://loaminoo.linkpc.net/3092098095091/The-Time-Quartet-Box-Set-Time-Quartet-1-4-by-Madeleine-L-39-Engle.pdf
    • http://loaminoo.linkpc.net/1092096097091095/The-Dryad-Quartet-The-Dryad-Quartet-1-4-by-Katie-Jennings.pdf
    • http://loaminoo.linkpc.net/4099093096091093/The-Dryad-Quartet-The-Dryad-Quartet-1-4-by-Katie-Jennings.pdf
    • http://loaminoo.linkpc.net/3093091097093/The-Alexandria-Quartet-The-Alexandria-Quartet-1-4-by-Lawrence-Durrell.pdf
    • http://loaminoo.linkpc.net/2091091093099093/Falling-for-Autumn-Falling-for-Autumn-1-by-Heather-Topham-Wood.pdf
    • http://loaminoo.linkpc.net/4094090094093090/The-Autumn-Fairy-The-Autumn-Fairy-1-by-Brittany-Fichter.pdf
    • http://loaminoo.linkpc.net/2099093095097097/Autumn-Falls-Autumn-Falls-1-by-Bella-Thorne.pdf
    • http://loaminoo.linkpc.net/2099092090094097/Pieces-of-Autumn-Pieces-of-Autumn-1-by-Mara-Black.pdf
    • http://loaminoo.linkpc.net/8090092097092095/Santa-Barbara-Exotic-Flora-A-Handbook-of-Plants-from-Foreign-Countries-Grown-at-Santa-Barbara-California-1895-by-F-Franceschi.pdf
    • http://loaminoo.linkpc.net/2094094091092090/The-String-Quartet-by-Dan-Hupalo.pdf
    • http://loaminoo.linkpc.net/3099094092092092/An-Odd-Quartet-by-Michael-Brookes.pdf
    • http://loaminoo.linkpc.net/6095096099091/The-Raj-Quartet-by-Paul-Scott.pdf
    • http://loaminoo.linkpc.net/4091094098095/The-Big-Nowhere-L-A-Quartet-2-by-James-Ellroy.pdf
    • http://loaminoo.linkpc.net/3093098097090091/The-Raj-Quartet-by-Paul-Scott.pdf
    • http://loaminoo.linkpc.net/1092093098094098/Back-Of-Beyond-A-Highway-Quartet-Novel-1-by-C-J-Box.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.