Malicious PDF — malware analysis report

Static analysis result for SHA-256 46d4b18a2acde9d5…

MALICIOUS

PDF

19.9 KB Created: 2019-05-02 05:27:05 +01:00 Authoring application: mPDF 5.7
MD5: 3c2a04cf4bb02aada098f326537b8d85 SHA-1: 6046f30a43dd551830f2dc01bae84e9883718c97 SHA-256: 46d4b18a2acde9d53d3ae929ebca4bfd0514ce1fb7c0ad81c1c6820de43096e9
60 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell

The PDF file contains a large number of embedded URLs pointing to external PDF documents. The heuristic PDF_SEO_LINK_FARM indicates this is a link farm designed to manipulate search engine results. While the URLs themselves are currently marked as benign, the pattern suggests a potential for hosting malicious content or redirecting users to phishing sites. No scripts were extracted from this sample.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/2093090095097095/The-Year-Babe-Ruth-Hit-104-Home-Runs-Recrowning-Baseball-s-Greatest-Slugger-by-Bill-Jenkinson.pdf
    • http://loaminoo.linkpc.net/4092097092093092/Did-Babe-Ruth-Call-His-Shot-And-Other-Unsolved-Mysteries-of-Baseball-by-Paul-Aron.pdf
    • http://loaminoo.linkpc.net/4092096093092091/Bill-Veeck-Baseball-s-Greatest-Maverick-by-Paul-Dickson.pdf
    • http://loaminoo.linkpc.net/8095096097093095/The-Further-Adventures-of-Slugger-McBatt-Baseball-Stories-by-W-P-Kinsella.pdf
    • http://loaminoo.linkpc.net/1091094094095094092/20th-Century-Baseball-Chronicle-A-Year-By-Year-History-of-Major-League-Baseball-by-David-Nemec.pdf
    • http://loaminoo.linkpc.net/4092096095091095/Hank-Aaron-One-for-the-Record-The-Inside-Story-of-Baseball-s-Greatest-Home-Run-by-George-Plimpton.pdf
    • http://loaminoo.linkpc.net/4092096097099094/Ty-and-The-Babe-Baseball-s-Fiercest-Rivals-A-Surprising-Friendship-and-the-1941-Has-Beens-Golf-Championship-by-Tom-Stanton.pdf
    • http://loaminoo.linkpc.net/4092096098094090/Babe-Ruth-Launching-the-Legend-by-Jim-Reisler.pdf
    • http://loaminoo.linkpc.net/5090094092095094/Babe-Ruth-Legends-in-Sports-by-Matt-Christopher.pdf
    • http://loaminoo.linkpc.net/2093090097091094/Babe-Ruth-s-Incredible-Records-and-the-44-Players-Who-Broke-Them-by-John-A-Mercurio.pdf
    • http://loaminoo.linkpc.net/4092096090098093/The-Bill-James-Guide-to-Baseball-Managers-From-1870-to-Today-by-Bill-James.pdf
    • http://loaminoo.linkpc.net/3098094098099096/Bill-Mauldin-s-Army-Bill-Mauldin-s-Greatest-World-War-II-Cartoons-by-Bill-Mauldin.pdf
    • http://loaminoo.linkpc.net/4092097090090093/Asterisk-Home-Runs-Steroids-and-the-Rush-to-Judgment-by-David-Ezra.pdf
    • http://loaminoo.linkpc.net/5091096094094096/Bill-James-Historical-Baseball-Abstract-by-Bill-James.pdf
    • http://loaminoo.linkpc.net/3090096094092097/Babe-The-Life-and-Legend-of-Babe-Didrikson-Zaharias-by-Susan-E-Cayleff.pdf
    • http://loaminoo.linkpc.net/3095094098091096/Home-Learning-Year-by-Year-How-to-Design-a-Homeschool-Curriculum-from-Preschool-Through-High-School-by-Rebecca-Rupp.pdf
    • http://loaminoo.linkpc.net/9097098093093095/Emmy-You-re-the-Greatest-by-Ruth-Lerner-Perle.pdf
    • http://loaminoo.linkpc.net/2099094093097094/The-Greatest-Adventure-by-Bill-Willingham.pdf
    • http://loaminoo.linkpc.net/3090098090092095/DC-s-Greatest-Imaginary-Stories-Vol-2-by-Bill-Finger.pdf
    • http://loaminoo.linkpc.net/1094092091093099/Batman-The-Greatest-Stories-Ever-Told-by-Bill-Finger.pdf
    • http://loaminoo.linkpc.net/40920960950910

Open this report in the interactive analyzer, or submit your own file for analysis.