Malicious PDF — malware analysis report

Static analysis result for SHA-256 4aea91f4e3500940…

MALICIOUS

PDF

14.7 KB Created: 2019-05-01 19:32:29 +01:00 Authoring application: mPDF 5.7
MD5: 487ac4c323f60ed07a8d99479dc0850b SHA-1: b96d182504330fa731b3ca86a67e32033878c7d4 SHA-256: 4aea91f4e35009406bae1a17acd3eb05bd39cf391c1569916d25e24afd04fa5b
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1059.001 PowerShell

The PDF file contains a large number of embedded URLs, indicative of a link farm or redirection scheme. While the URLs themselves are currently marked as benign, the sheer volume and the PDF_SEO_LINK_FARM heuristic suggest a malicious intent to manipulate search engine results or redirect users to potentially harmful sites. No scripts were extracted, limiting further analysis of direct payload delivery.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/2097090093098098/Call-of-the-Alpha-Blue-Moon-3-by-A-E-Via.pdf
    • http://loaminoo.linkpc.net/4090092099098099/Blue-Moon-Blue-Moon-and-Red-Sunset-1-by-Rowena-Sudbury.pdf
    • http://loaminoo.linkpc.net/1097094099095095/Blue-Moon-Blue-Crystal-1-by-Pat-Spence.pdf
    • http://loaminoo.linkpc.net/2097097099095094/Alpha-Instinct-Moon-Shifter-1-by-Katie-Reus.pdf
    • http://loaminoo.linkpc.net/3090093098091098/Alpha-Instinct-Moon-Shifter-1-by-Katie-Reus.pdf
    • http://loaminoo.linkpc.net/9096098091091099/Alpha-Takes-Beta-Red-Moon-Mates-2-by-Jacklyn-Black.pdf
    • http://loaminoo.linkpc.net/3099092096094098/Little-Boy-Blue-and-the-Man-in-the-Moon-by-ariana_paris.pdf
    • http://loaminoo.linkpc.net/1091091098096090091/Ladylust-4-Alpha-Males-The-Big-Bundle-of-Hetero-Erotica-About-Macho-Alpha-Studs-Alpha-Male-Hetero-Big-Bundles-Book-6-by-B-R-Eastman.pdf
    • http://loaminoo.linkpc.net/4096099093092097/Blue-Moon-by-Angela-Colsin.pdf
    • http://loaminoo.linkpc.net/3099094094092095/Blue-Moon-by-Marilyn-Halvorson.pdf
    • http://loaminoo.linkpc.net/3094097096090096/Blue-Moon-by-Julia-Green.pdf
    • http://loaminoo.linkpc.net/1091093099090091/Man-in-the-Blue-Moon-by-Michael-Morris.pdf
    • http://loaminoo.linkpc.net/1092091093092092/Once-In-A-Blue-Moon-The-Return-of-the-Gargoyles-by-January-May.pdf
    • http://loaminoo.linkpc.net/4095095096099092/The-Blue-Moon-Circus-by-Michael-Raleigh.pdf
    • http://loaminoo.linkpc.net/2098093096096096/The-Last-Second-Chance-Blue-Moon-3-by-Lucy-Score.pdf
    • http://loaminoo.linkpc.net/1091096092099096/The-Blue-Moon-Circus-by-Michael-Raleigh.pdf
    • http://loaminoo.linkpc.net/3097094091097/Blue-Highways-by-William-Least-Heat-Moon.pdf
    • http://loaminoo.linkpc.net/3092098092097/Blue-Moon-The-Immortals-2-by-Alyson-Noel.pdf
    • http://loaminoo.linkpc.net/4094095092096092/Blue-Moon-Rising-The-Patroness-1-by-Natalie-Herzer.pdf
    • http://loaminoo.linkpc.net/3096095099096094/Blue-Moon-The-Runaways-3-by-Jill-Marie-Landis.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.