Malicious PDF — malware analysis report

Static analysis result for SHA-256 4ae35f85f9090505…

MALICIOUS

PDF

15.9 KB Created: 2019-05-03 08:27:00 +01:00 Authoring application: mPDF 5.7
MD5: 7cf4cd380ac2906f491435c1442d14ae SHA-1: 9ed2b2b6fd2c1ea643da72d6d2fc9f4fd11a5ac8 SHA-256: 4ae35f85f90905059177fc10ff69d78ee251f50a892dbbd442fd0356e50ca1ab
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF contains a link farm with 22 external links, all pointing to PDFs hosted on the domain 'cefasfese.4pu.com'. This suggests a tactic to drive traffic to a large collection of documents, potentially for SEO manipulation or to host malicious content disguised as legitimate files. No scripts were extracted, and the document body was unreadable.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/9731731738738737/Nadja-Der-W-chterin-Erbe-by-Steffi-Krumbiegel.pdf
    • http://cefasfese.4pu.com/1731730732731734733/Verm-chtnis---Erbe-der-Gefallenen-by-Nadja-Seiler.pdf
    • http://cefasfese.4pu.com/9739739736737733/The-Complete-Poems-of-Nadja-Anjoman---Divane-Nadja-Anjoman-by-Nadja-Anjoman.pdf
    • http://cefasfese.4pu.com/1731736734739735735/Die-J-din-by-Iris-Krumbiegel.pdf
    • http://cefasfese.4pu.com/1730736738739732734/Schatzsuche-in-Leipzig-Lilly-und-Nikolas-auf-der-Suche-nach-dem-singenden-Saphir-by-Steffi-Bieber-Geske.pdf
    • http://cefasfese.4pu.com/1731738731732738739/Sagenhafte-Ferien-auf-Usedom---Lilly-Nikolas-und-das-Geheimnis-der-versunkenen-Stadt-by-Steffi-Bieber-Geske.pdf
    • http://cefasfese.4pu.com/9731735736731739/Rungholts-Erbe-by-Andr-Siebold.pdf
    • http://cefasfese.4pu.com/9730739732732730/Das-Erbe-der-MacDougals-by-Morgan-Grey.pdf
    • http://cefasfese.4pu.com/1731735736731735734/Gefahrdetes-Erbe-by-Eva-Frodl-Kraft.pdf
    • http://cefasfese.4pu.com/8737731738734735/Das-bittere-Erbe-by-Delia-M-ller.pdf
    • http://cefasfese.4pu.com/9739739738735732/Go-Get-Nadja-by-John-L-Hash.pdf
    • http://cefasfese.4pu.com/9735731733732731/Das-Erbe-der-W-lfin-Thriller-by-Dieter-H-Neumann.pdf
    • http://cefasfese.4pu.com/1730735730730731739/Armathia---ein-g-ttliches-Erbe-by-Nathalie-von-Heiden.pdf
    • http://cefasfese.4pu.com/9739739735731734/ashita-no-Nadja-1-by-Izumi-Todo.pdf
    • http://cefasfese.4pu.com/9739739736733732/I-Nadja-and-Other-Poems-by-Susan-Elmslie.pdf
    • http://cefasfese.4pu.com/9739739736733731/ashita-no-Nadja-2-by-Izumi-Todo.pdf
    • http://cefasfese.4pu.com/1730735733733739738/Geheimnisvoller-Neptun-by-Nadja-Blume.pdf
    • http://cefasfese.4pu.com/1731730738735734732/Blutiges-Erbe-City-of-Death-2-by-Lolaca-Manhisse.pdf
    • http://cefasfese.4pu.com/9732730739738733/Haus-der-H-terin-Band-1-Das-Erbe-by-Andrea-Habeney.pdf
    • http://cefasfese.4pu.com/9730739731732731/Portugiesisches-Erbe-Ein-Lissabon-Krimi-by-Luis-Sellano.pdf
    • http://cefasfese.4pu.com/1731738731732738739/Sagenhafte-Ferien-auf-Usedom---Lilly-Nikolas-und-das-Geheimnis-der-versunkenen-Stadt-by-S

Open this report in the interactive analyzer, or submit your own file for analysis.