Malicious PDF — malware analysis report

Static analysis result for SHA-256 4ec0be9361029e65…

MALICIOUS

PDF

16.4 KB Created: 2019-05-03 23:35:14 +01:00 Authoring application: mPDF 5.7
MD5: 3a7a1648c2b5173a0950f7a7768b40f4 SHA-1: 1f60efe587ad64e8f32a0b842dcd1d26289d98f4 SHA-256: 4ec0be9361029e655d20ebbb9217cc42b3f4eedbc98ae855677f9711bcd3844b
60 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell

The PDF contains a large number of embedded URLs, identified as a link farm. While the URLs themselves are currently marked as benign, the sheer volume and structure suggest a malicious intent, possibly for SEO manipulation or to redirect users to malicious sites. No scripts were extracted from this sample, limiting further analysis of its behavior.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/3735734734733739/Earth-and-Fire-Earth-Girl-0-5-by-Janet-Edwards.pdf
    • http://cefasfese.4pu.com/2738730730731737/Earth-Star-Earth-Girl-2-by-Janet-Edwards.pdf
    • http://cefasfese.4pu.com/4736732732737/Earth-Star-Earth-Girl-2-by-Janet-Edwards.pdf
    • http://cefasfese.4pu.com/1732731738732736/Earth-Girl-Earth-Girl-1-by-Janet-Edwards.pdf
    • http://cefasfese.4pu.com/9733738732737/Earth-Girl-Earth-Girl-1-by-Janet-Edwards.pdf
    • http://cefasfese.4pu.com/1731736732738738735/Jurassic-Earth-2-Prologue-The-Last-Woman-on-Earth-The-Jurassic-Earth-Saga-by-Logan-T-Stark.pdf
    • http://cefasfese.4pu.com/9730730738730/Shade-the-Changing-Girl-Volume-1-Earth-Girl-Made-Easy-by-Cecil-Castellucci.pdf
    • http://cefasfese.4pu.com/3730736732737739/Shade-the-Changing-Girl-2016--Vol-1-Earth-Girl-Made-Easy-by-Cecil-Castellucci.pdf
    • http://cefasfese.4pu.com/6731739730732732/The-Day-The-Earth-Cried-Invasion-Earth-Book-1-by-Mark-Cusco-Ailes.pdf
    • http://cefasfese.4pu.com/9732736735736732/Earth-Construction-Handbook-The-Building-Material-Earth-in-Modern-Architecture-by-Gernot-Minke.pdf
    • http://cefasfese.4pu.com/7734738737731734/Earth-2-1-Regenesis-Earth-2-0-Trilogy-2-by-William-Crow-Johnson.pdf
    • http://cefasfese.4pu.com/1731734734735737733/The-Green-Hills-of-Earth-The-Menace-from-Earth-by-Robert-A-Heinlein.pdf
    • http://cefasfese.4pu.com/4739738731732739/The-Good-Earth-Introduction-to-Earth-Science-by-David-A-McConnell.pdf
    • http://cefasfese.4pu.com/3737734735730738/A-Prince-of-Earth-The-Histories-of-Earth-2-by-Steven-J-Carroll.pdf
    • http://cefasfese.4pu.com/5736737737734/There-Were-Giants-Upon-the-Earth-Earth-Chronicles-7-5-by-Zecharia-Sitchin.pdf
    • http://cefasfese.4pu.com/1736733739734736/Swamp-Thing-Vol-5-Earth-to-Earth-by-Alan-Moore.pdf
    • http://cefasfese.4pu.com/1736733731734739/The-Third-Earth-Beta-Earth-Chronicles-5-by-Wesley-Britton.pdf
    • http://cefasfese.4pu.com/2733733731734/The-Good-Earth-House-of-Earth-1-by-Pearl-S-Buck.pdf
    • http://cefasfese.4pu.com/2730738739733738/Earth-Air-Fire-and-Custard-by-Tom-Holt.pdf
    • http://cefasfese.4pu.com/9738738735737739/Earth-s-Requiem-Earth-Reclaimed-1-by-Ann-Gimpel.pdf
    • http://cefasfese.4pu.com/6731739730732732/The-Day-The-Earth-Cried-Invasi

Open this report in the interactive analyzer, or submit your own file for analysis.