Malicious PDF — malware analysis report

Static analysis result for SHA-256 4833e451c48f01a1…

MALICIOUS

PDF

15.9 KB Created: 2019-04-30 04:23:49 +01:00 Authoring application: mPDF 5.7
MD5: 8d86ace29f3d2db82ae068701632280d SHA-1: 7848bdbf246dbc5528039d85695a9cdc14a9941f SHA-256: 4833e451c48f01a18c408617866ddc2653e35822260dde150951fde34e7a2ed3
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1059.001 PowerShell

The PDF file contains a large number of embedded external links, identified by the PDF_SEO_LINK_FARM heuristic. While most of these links resolve to benign content, the sheer volume and the nature of the heuristic suggest a malicious intent, possibly for SEO manipulation or to distribute further malware. No scripts were extracted from this sample. The attack pattern is inferred from the link farm heuristic.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc
    • http://loaminoo.linkpc.net/4094097094096097/Glenn-Hughes-The-Autobiography---From-Deep-Purple-to-Black-Country-Communion-by-Glenn-Hughes.pdf
    • http://loaminoo.linkpc.net/2095093092092096/Glenn-Hates-Books-Vol-1-Brutally-Honest-Book-Reviews-by-Glenn-Conley.pdf
    • http://loaminoo.linkpc.net/2099095093090/Hashknife-Cowboy-Recollections-of-Mack-Hughes-by-Stella-Hughes.pdf
    • http://loaminoo.linkpc.net/4095096091096092/Hughes-Views-of-the-Blues-by-Langston-Hughes.pdf
    • http://loaminoo.linkpc.net/4099090090090090/Vintage-Hughes-by-Langston-Hughes.pdf
    • http://loaminoo.linkpc.net/3095097093091091/Black-Diamond-Jinn-by-Mary-Hughes.pdf
    • http://loaminoo.linkpc.net/9091095094092/Poetry-for-Young-People-Langston-Hughes-by-Langston-Hughes.pdf
    • http://loaminoo.linkpc.net/4099094092090097/Jack-Black-and-the-Ship-of-Thieves-by-Carol-Hughes.pdf
    • http://loaminoo.linkpc.net/4094091099093095/Country-Soul-Making-Music-and-Making-Race-in-the-American-South-by-Charles-L-Hughes.pdf
    • http://loaminoo.linkpc.net/1093097097099090/Selected-Poems-of-Langston-Hughes-by-Langston-Hughes.pdf
    • http://loaminoo.linkpc.net/2093096090091/The-Life-of-Langston-Hughes-Volume-II-1941-1967-I-Dream-a-World-Life-of-Langston-Hughes-1941-1967-by-Arnold-Rampersad.pdf
    • http://loaminoo.linkpc.net/9097099092099/The-Last-Day-by-Glenn-Kleier.pdf
    • http://loaminoo.linkpc.net/4091090096099096/My-Girl-by-Stormy-Glenn.pdf
    • http://loaminoo.linkpc.net/5094091090092091/The-Devil-Will-Come-by-Glenn-Cooper.pdf
    • http://loaminoo.linkpc.net/4092090091090/Everybody-Out-of-the-Laundromat-I-Need-to-Think-by-Phil-G-Glenn.pdf
    • http://loaminoo.linkpc.net/1097090091096099/Bonfire-by-Kendra-Glenn.pdf
    • http://loaminoo.linkpc.net/1091091095091093/The-Leftovers-by-Lisa-Glenn.pdf
    • http://loaminoo.linkpc.net/1091095096094099090/Die-Kreuzritter-by-John-Glenn.pdf
    • http://loaminoo.linkpc.net/7098099099092097/Sovereign-s-Pairing-by-E-L-Glenn.pdf
    • http://loaminoo.linkpc.net/5099091098090/Drug-Related-by-Roy-Glenn.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.