Malicious PDF — malware analysis report

Static analysis result for SHA-256 44790c917e574f00…

MALICIOUS

PDF

14.1 KB Created: 2019-04-30 17:21:42 +01:00 Authoring application: mPDF 5.7
MD5: 95a17091184799979dc7b4ca38fddc72 SHA-1: dd43b54c62578e88c914cc4a9768926e471aa71d SHA-256: 44790c917e574f00e813a359d258126fc0bfe3c2aa300cb46bf884db01cb9790
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF file contains a large number of embedded links pointing to external resources, identified by the PDF_SEO_LINK_FARM heuristic. While the URLs themselves are currently marked as benign, the sheer volume and nature of these links suggest a malicious intent, likely for SEO manipulation or to distribute further payloads. No scripts were extracted from this sample, and the document body was unreadable.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.ne
    • http://loaminoo.linkpc.net/4093090096090098/Wasteland-Wasteland-1-4-by-R-G-Alexander.pdf
    • http://loaminoo.linkpc.net/1095095094093095/Wasteland-Wasteland-1-by-Lynn-Rush.pdf
    • http://loaminoo.linkpc.net/4090090097098094/The-Wasteland-Saga-Three-Novels-The-Wasteland-Saga-1-3-by-Nick-Cole.pdf
    • http://loaminoo.linkpc.net/3094098099097094/Wasteland-Wasteland-1-by-Ann-Bakshis.pdf
    • http://loaminoo.linkpc.net/3090090096097090/The-Whore-Wasteland-2-by-Lilli-Feisty.pdf
    • http://loaminoo.linkpc.net/3091094095092090/End-of-Winter-The-Wasteland-1-by-Steve-Bargdill.pdf
    • http://loaminoo.linkpc.net/3096097094097097/The-Breeder-Wasteland-3-by-Eden-Bradley.pdf
    • http://loaminoo.linkpc.net/2096091091091095/Wasteland-of-Flint-by-Thomas-Harlan.pdf
    • http://loaminoo.linkpc.net/3099090095090/The-Wasteland-Prufrock-and-Other-Poems-by-T-S-Eliot.pdf
    • http://loaminoo.linkpc.net/4091091094091095/Darkness-The-Wasteland-Chronicles-5-by-Kyle-West.pdf
    • http://loaminoo.linkpc.net/9099091091098095/Wasteland-Surviving-The-Evacuation-2-by-Frank-Tayell.pdf
    • http://loaminoo.linkpc.net/1098090092090094/Journey-to-Wasteland-Westfalia-1-by-Austin-Miller.pdf
    • http://loaminoo.linkpc.net/9098092094091097/Evolution-The-Wasteland-Chronicles-3-by-Kyle-West.pdf
    • http://loaminoo.linkpc.net/3091094096091090/Heroin-Angel-The-Wasteland-6-by-Steve-Bargdill.pdf
    • http://loaminoo.linkpc.net/3098099090090090/Prelude-to-Darkness-Wasteland-0-5-by-Lynn-Rush.pdf
    • http://loaminoo.linkpc.net/8095094093090099/Runaways-Volume-2-Teenage-Wasteland-by-Brian-K-Vaughan.pdf
    • http://loaminoo.linkpc.net/8092093095099097/Wasteland-Survival-Guide-by-Sean-Michael-Argo.pdf
    • http://loaminoo.linkpc.net/7094096098093095/Archer-amp-Armstrong-Volume-6-American-Wasteland-by-Fred-Van-Lente.pdf
    • http://loaminoo.linkpc.net/9097094095090090/Kain-s-Rescue-Guardians-of-Lunar-Wasteland-1-by-Dalia-Wright.pdf
    • http://loaminoo.linkpc.net/9097094096091091/KAIN-S-RESCUE-Guardians-of-Lunar-Wasteland-Book-1-by-Dalia-Wright.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.