Malicious PDF — malware analysis report

Static analysis result for SHA-256 46d358f04fb3afb8…

MALICIOUS

PDF

15.1 KB Created: 2019-04-30 02:25:23 +01:00 Authoring application: mPDF 5.7
MD5: 3b92e11a82f12dd5c4b0e3091f1faa54 SHA-1: 8ebb9ae081b506df09562b1ac9f399d1c1bdfdb1 SHA-256: 46d358f04fb3afb82f0f2facd04d48c3d99dd54916b20686168fdb018ea89aca
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1204.002 Malicious Link

The PDF document contains a large number of embedded URLs, identified as a link farm. These URLs point to various book titles hosted on the 'loaminoo.linkpc.net' domain. While the individual URLs are currently marked as benign, the sheer volume and structure suggest a malicious intent, likely for SEO manipulation or to serve as a gateway to malicious content. No scripts were extracted from this sample.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/4097097092094094/Beginnings-Peaks-of-Power-Book-1-by-Paul-Campbell-Jr-.pdf
    • http://loaminoo.linkpc.net/8092094096094090/The-Legend-of-the-Spirit-Warriors-Beginnings-by-Chad-Campbell.pdf
    • http://loaminoo.linkpc.net/5097093096096092/New-Beginnings-by-Paul-LaFlamme.pdf
    • http://loaminoo.linkpc.net/3092096094095/The-Power-of-Myth-by-Joseph-Campbell.pdf
    • http://loaminoo.linkpc.net/1090095097098094090/Beginnings-Nightwalkers-Book-1-by-H-N-Sieverding.pdf
    • http://loaminoo.linkpc.net/6097096099094091/Least-I-Can-Do-Beginnings-Fire-In-The-Hole-Beginnings-3-by-Ryan-Sohmer.pdf
    • http://loaminoo.linkpc.net/2097093098092095/Starr-Frontiers-Beginnings-Book-1-Destiny-by-M-J-Mitchell.pdf
    • http://loaminoo.linkpc.net/4098091091094099/A-Valentine-for-August-Maybrook-Beginnings-Book-1-by-Nicole-Strycharz.pdf
    • http://loaminoo.linkpc.net/1099091092095094/Fresh-Beginnings-Beginnings-3-by-Iris-Blobel.pdf
    • http://loaminoo.linkpc.net/7092097090092/Rocky-Mountain-Beginnings-Lucy-Dakota-Book-1-by-Carol-Sue-Shride.pdf
    • http://loaminoo.linkpc.net/6097093091098095/I-Can-Make-You-Confident-The-Power-to-Go-for-Anything-You-Want-by-Paul-McKenna.pdf
    • http://loaminoo.linkpc.net/2092095099090093/The-Secret-to-Teen-Power-by-Paul-Harrington.pdf
    • http://loaminoo.linkpc.net/1095096092097098/The-Power-of-a-Pawn-The-Game-of-Life-1-by-Paul-Spite.pdf
    • http://loaminoo.linkpc.net/9097093098098093/Shadow-of-Power-Paul-Madriani-9-by-Steve-Martini.pdf
    • http://loaminoo.linkpc.net/7095093099091091/Out-of-Control-Arden-Fleurs-Beginnings-Book-3-quot-Vengence-Is-Mine-quot-by-Crystal-Hayward.pdf
    • http://loaminoo.linkpc.net/1091093097091090094/The-Handfasting-The-Knights-of-de-Ware-Book-0-by-Glynnis-Campbell.pdf
    • http://loaminoo.linkpc.net/4092092090099091/Power-and-the-Idealists-Or-the-Passion-of-Joschka-Fischer-and-Its-Aftermath-by-Paul-Berman.pdf
    • http://loaminoo.linkpc.net/1099093095095091/Power-Girl-1988--1-Power-Girl-1988-by-Paul-Kupperberg.pdf
    • http://loaminoo.linkpc.net/3096095099092099/Stella-Louella-s-Runaway-Book-by-Lisa-Campbell-Ernst.pdf
    • http://loaminoo.linkpc.net/3091093093091098/The-Turn-Around-Upside-Down-Alphabet-Book-by-Lisa-Campbell-Ernst.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.