Malicious PDF — malware analysis report

Static analysis result for SHA-256 43120fe3f01b9897…

MALICIOUS

PDF

18.9 KB Created: 2019-04-30 09:59:08 +01:00 Authoring application: mPDF 5.7
MD5: 61766659492feb17685f2d899ef331d0 SHA-1: 19feaeb375977fa4265bc735fdf2f02a948694fc SHA-256: 43120fe3f01b98973a57a8ccd5e05b5a2e52b34750af02b997464257283b335f
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF file contains a large number of embedded URLs, forming a link farm. The heuristic 'PDF_SEO_LINK_FARM' indicates that these URLs are designed to direct users to external PDF documents, likely as a form of SEO abuse or to distribute further malicious content. While the specific intent beyond linking is unclear, the sheer volume of links suggests a malicious distribution or redirection scheme.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/1090093092098099090/Madness-Under-the-Royal-Palms-Love-and-Death-Behind-the-Gates-of-Palm-Beach-by-Laurence-Leamer.pdf
    • http://loaminoo.linkpc.net/1090093093090095096/Season-of-the-Devil-Love-amp-Evil-in-Palm-Beach-by-Pamela-Westwood.pdf
    • http://loaminoo.linkpc.net/5093099099098097/The-Pope-of-Palm-Beach-A-Novel-by-Tim-Dorsey.pdf
    • http://loaminoo.linkpc.net/1090093092097099096/The-Royal-Palm-by-Mrs-D-.pdf
    • http://loaminoo.linkpc.net/3093094094090097/The-Pope-of-Palm-Beach-Serge-Storms-21-by-Tim-Dorsey.pdf
    • http://loaminoo.linkpc.net/1090093093090091091/Dying-to-Live-in-Palm-Beach-by-Jane-Grossman.pdf
    • http://loaminoo.linkpc.net/1090093093090090098/Palm-Beach-Bones-Charlie-Crawford-Mystery-4-by-Tom-Turner.pdf
    • http://loaminoo.linkpc.net/1090093093090091093/Palm-Beach-Poison-A-Charlie-Crawford-Mystery-2-by-Tom-Turner.pdf
    • http://loaminoo.linkpc.net/2093098094090095/The-Man-Who-Made-Lists-Love-Death-Madness-and-the-Creation-of-Roget-s-Thesaurus-by-Joshua-Kendall.pdf
    • http://loaminoo.linkpc.net/4093093095096098/Ballrooms-and-Ugly-Poodles---Semi-Tall-Tales-of-a-Palm-Beach-Waitress-by-Katie-Schnack.pdf
    • http://loaminoo.linkpc.net/1090096097094098090/Kult-Death-is-Only-the-Beginning-On-the-Borderland-between-Terror-and-Madness-Dreams-and-Death-by-Gunilla-Jonsson.pdf
    • http://loaminoo.linkpc.net/8099095096096/Lady-of-Ch-iao-Kuo-Red-Bird-of-the-South-Southern-China-A-D-531-Royal-Diaries-8-by-Laurence-Yep.pdf
    • http://loaminoo.linkpc.net/2098093092090099/His-Royal-Love-Child-Royal-Brides-4-Scorsolini-Princes-2-by-Lucy-Monroe.pdf
    • http://loaminoo.linkpc.net/1090093092098099096/Palm-Reading-for-Beginners-Find-Your-Future-in-the-Palm-of-Your-Hand-by-Richard-Webster.pdf
    • http://loaminoo.linkpc.net/6095090099090099/Death-Beach-Invader-1-by-Simon-Scarrow.pdf
    • http://loaminoo.linkpc.net/3091094091096099/The-Death-Panel-Murder-Mayhem-and-Madness-by-Tom-Piccirilli.pdf
    • http://loaminoo.linkpc.net/7090092098098098/Black-Hearts-One-Platoon-s-Descent-Into-Madness-in-Iraq-s-Triangle-of-Death-by-Jim-Frederick.pdf
    • http://loaminoo.linkpc.net/1094098090090092/Camouflaged-Hiding-from-Love-1-by-Selena-Laurence.pdf
    • http://loaminoo.linkpc.net/7097095096092093/The-Love-Of-Landry-by-Paul-Laurence-Dunbar.pdf
    • http://loaminoo.linkpc.net/3096099099090099/Buried-Hiding-from-Love-4-by-Selena-Laurence.pdf
    • http://loaminoo.linkpc.net/2093098094090095/The-Man-Who-Made-Lists-Love-Death-Madness-and-the-Creation-of-Roget-s-Thesa

Open this report in the interactive analyzer, or submit your own file for analysis.