MALICIOUS
60
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
T1059.001 PowerShell
The PDF file contains a large number of embedded URLs pointing to external PDF documents, a technique often used for SEO manipulation or to distribute further malicious content. While no scripts were extracted, the PDF structure and the heuristic firings strongly suggest a malicious intent to redirect users to a large link farm. The primary IOCs are the URLs found within the document body.
Heuristics 2
-
Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARMSmall PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://loaminoo.linkpc.net/2096098096097/In-the-Bleak-Midwinter-The-Rev-Clare-Fergusson-amp-Russ-Van-Alstyne-Mysteries-1-by-Julia-Spencer-Fleming.pdf
- http://loaminoo.linkpc.net/3091094099093/I-Shall-Not-Want-Rev-Clare-Fergusson-amp-Russ-Van-Alstyne-Mysteries-6-by-Julia-Spencer-Fleming.pdf
- http://loaminoo.linkpc.net/1096099097096/Out-of-the-Deep-I-Cry-Rev-Clare-Fergusson-amp-Russ-Van-Alstyne-Mysteries-3-by-Julia-Spencer-Fleming.pdf
- http://loaminoo.linkpc.net/2096099094093/Through-the-Evil-Days-Rev-Clare-Fergusson-amp-Russ-Van-Alstyne-Mysteries-8-by-Julia-Spencer-Fleming.pdf
- http://loaminoo.linkpc.net/2091097094096094/Letters-to-a-Soldier-Rev-Clare-Fergusson-amp-Russ-Van-Alstyne-Mysteries-6-5-by-Julia-Spencer-Fleming.pdf
- http://loaminoo.linkpc.net/3092093093096098/Through-the-Evil-Days-Rev-Clare-Fergusson-amp-Russ-Van-Alstyne-Mysteries-8-by-Julia-Spencer-Fleming.pdf
- http://loaminoo.linkpc.net/5093091090091/A-Fountain-Filled-with-Blood-Rev-Clare-Fergusson-amp-Russ-Van-Alstyne-Mysteries-2-by-Julia-Spencer-Fleming.pdf
- http://loaminoo.linkpc.net/5090091098094091/In-the-Bleak-Midwinter-by-Patricia-Hall.pdf
- http://loaminoo.linkpc.net/3096095091092091/In-the-Bleak-Midwinter-by-Andra-Brynn.pdf
- http://loaminoo.linkpc.net/9098099096096096/Heimliche-Liebe-Julia-1582-by-Catherine-Spencer.pdf
- http://loaminoo.linkpc.net/6091099091091097/Back-to-St-Clare-s-Second-Form-at-St-Clare-s---Claudine-at-St-Clare-s---Fifth-Formers-of-St-Clare-s-by-Enid-Blyton.pdf
- http://loaminoo.linkpc.net/7097096093099099/Last-Lair-of-Wolves-Inspector-Le-Fleming-Mysteries-Book-1-by-Sean-Frain.pdf
- http://loaminoo.linkpc.net/7091098099097093/Ashes-of-the-Elements-Hawkenlye-Mysteries-2-by-Alys-Clare.pdf
- http://loaminoo.linkpc.net/2092091099092097/Doc-Gutson-s-Revenge-Bella-Street-Mysteries-2-by-Clare-Havens.pdf
- http://loaminoo.linkpc.net/2092091099093096/The-Secret-Formula-Bella-Street-Mysteries-1-by-Clare-Havens.pdf
- http://loaminoo.linkpc.net/3095095090092093/Losing-Your-Head-The-Charlie-Davies-Mysteries-Book-1-by-Clare-Kauter.pdf
- http://loaminoo.linkpc.net/6091099091092097/St-Clare-s-Claudine-At-St-Clare-s-amp-Fifth-Formers-At-St-Clare-s-by-Enid-Blyton.pdf
- http://loaminoo.linkpc.net/5098095097099098/Cme-Fleming-S-Art-And-Ideas-10e-by-William-Fleming.pdf
- http://loaminoo.linkpc.net/5099091097099099/Bleak-House-1852-by-Charles-Dickens-The-Ninth-Novel-by-Charles-Dickens-World-s-Classic-s-Bleak-House-Is-One-of-Charles-Dickens-s-Major-Novels-First-Published-as-a-Serial-Between-March-1852-and-September-1853-by-Charles-Dickens.pdf
- http://loaminoo.linkpc.net/7093093090096092/The-Medici-Aesop-Spencer-MS-50-from-the-Spencer-Collection-of-the-New-York-Public-Library-by-Aesop.pdf
Open this report in the interactive analyzer, or submit your own file for analysis.