Malicious PDF — malware analysis report

Static analysis result for SHA-256 4c316ada33b0a42d…

MALICIOUS

PDF

19.3 KB Created: 2019-04-29 23:08:17 +01:00 Authoring application: mPDF 5.7
MD5: 3d6a873422b20fdf7d14dc8b0d3690f9 SHA-1: 4b638e028f4d8abb4109f90686ff22b72f3564c2 SHA-256: 4c316ada33b0a42df90ff225276cfeb33f04d9c233d5ada4afc1ef57ed95451d
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF contains a large number of embedded links, identified by the PDF_SEO_LINK_FARM heuristic. While the document body is heavily obfuscated, the presence of numerous links suggests a tactic to drive traffic or distribute further content. The links themselves point to what appear to be book titles, but the sheer volume and the heuristic firing indicate a malicious intent, possibly for SEO manipulation or as a lure for malicious downloads.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/6090096098091095/Le-comte-de-Monte-Cristo-Tome-IV-The-Count-of-Monte-Cristo-part-4-of-4-by-Alexandre-Dumas.pdf
    • http://loaminoo.linkpc.net/6097092096096094/O-Conde-de-Monte-Cristo-V-3-The-Count-of-Monte-Cristo-part-3-of-3-by-Alexandre-Dumas.pdf
    • http://loaminoo.linkpc.net/7091096093099/Le-Comte-De-Monte-Cristo-3-The-Count-of-Monte-Cristo-part-3-of-3-by-Alexandre-Dumas.pdf
    • http://loaminoo.linkpc.net/5090098093097/The-Count-of-Monte-Cristo-V1-The-Count-of-Monte-Cristo-part-1-of-2-by-Alexandre-Dumas.pdf
    • http://loaminoo.linkpc.net/6097092096095098/The-Count-of-Monte-Cristo-Volume-II-The-Count-of-Monte-Cristo-2-of-2-by-Alexandre-Dumas.pdf
    • http://loaminoo.linkpc.net/6097092097092098/The-Count-of-Monte-Cristo-Volume-V-The-Count-of-Monte-Cristo-5-of-5-by-Alexandre-Dumas.pdf
    • http://loaminoo.linkpc.net/5099092094094091/The-Count-of-Monte-Cristo---Alexandre-Dumas-Special-edition-Annotated-by-Alexandre-Dumas.pdf
    • http://loaminoo.linkpc.net/1090099098090095097/The-Count-of-Monte-Cristo-By-Alexandre-Dumas---Rank-30-Of-100-100-Formatted-Wordwise-Enabled-Active-TOC-Active-Footnotes-Illustrated--JKL-Classics-by-Alexandre-Dumas.pdf
    • http://loaminoo.linkpc.net/5093092095093098/The-Count-of-Monte-Cristo-Illustrated-by-Alexandre-Dumas.pdf
    • http://loaminoo.linkpc.net/1090091096098096095/The-Count-of-Monte-Cristo-An-Adventure-Novel-by-Alexandre-Dumas.pdf
    • http://loaminoo.linkpc.net/5097094090093090/The-Count-Of-Monte-Cristo-Original-Version-by-Alexandre-Dumas.pdf
    • http://loaminoo.linkpc.net/8091095091095098/The-Count-of-Monte-Cristo-Titan-Illustrated-Classics-by-Alexandre-Dumas.pdf
    • http://loaminoo.linkpc.net/8091097090099092/The-Count-of-Monte-Cristo-Annotated-with-short-biography-by-Alexandre-Dumas.pdf
    • http://loaminoo.linkpc.net/9090099091099091/The-Count-of-Monte-Cristo-Great-Illustrated-Classics-D224-28-by-Alexandre-Dumas.pdf
    • http://loaminoo.linkpc.net/7095091094095092/THE-COUNT-OF-MONTE-CRISTO-Illustrated-All-Five-Volumes-Complete-and-Illustrated-Edition-by-Alexandre-Dumas.pdf
    • http://loaminoo.linkpc.net/4095096097093/Le-Comte-de-Monte-Cristo-I-Le-Comte-de-Monte-Cristo-1-of-2-by-Alexandre-Dumas.pdf
    • http://loaminoo.linkpc.net/5094097094096092/Contele-de-Monte-Cristo-Contele-de-Monte-Cristo-1-of-4-by-Alexandre-Dumas.pdf
    • http://loaminoo.linkpc.net/1095090091099098/The-Sultan-of-Monte-Cristo-Sequels-to-the-Count-of-Monte-Cristo-1-by-Holy-Ghost-Writer.pdf
    • http://loaminoo.linkpc.net/4093096094099093/The-Black-Count-Glory-Revolution-Betrayal-and-the-Real-Count-of-Monte-Cristo-by-Tom-Reiss.pdf
    • http://loaminoo.linkpc.net/6097092096095091/The-Count-of-Monte-Cristo-by-Beatrice-Conway.pdf
    • http://loaminoo.linkpc.net/50990

Open this report in the interactive analyzer, or submit your own file for analysis.