Malicious PDF — malware analysis report

Static analysis result for SHA-256 529729312a0911bf…

MALICIOUS

PDF

17.8 KB Created: 2019-05-02 18:39:51 +01:00 Authoring application: mPDF 5.7
MD5: 6a40eb0a58bef4a5dee81a3e21c52225 SHA-1: f74b78d061b0f2a0faf02f0f13e9a309cd70a85e SHA-256: 529729312a0911bffa9cb9bcdd88508826647e71b01937bf314f29dba10edfce
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF file exhibits a critical heuristic firing for a link farm, containing numerous embedded URLs. These URLs, while individually marked as benign, collectively suggest an attempt to manipulate search engine results or distribute content. The primary attack pattern involves leveraging these links, likely as a lure or to redirect users to potentially malicious sites. No scripts were extracted from this sample.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://xiixmcuin.linkpc.net/2201209202206203/Emergence-Project-Emergence-1-by-Jamie-Zakian.pdf
    • http://xiixmcuin.linkpc.net/6202209206206201/Sleepwalking-Into-a-New-World-The-Emergence-of-Italian-City-Communes-in-the-Twelfth-Century-The-Emergence-of-Italian-City-Communes-in-the-Twelfth-Century-by-Chris-Wickham.pdf
    • http://xiixmcuin.linkpc.net/2204209208203/Emergence-by-David-R-Palmer.pdf
    • http://xiixmcuin.linkpc.net/3209209201201201/Emergence-Fire-and-Ice-4-by-Kim-Faulks.pdf
    • http://xiixmcuin.linkpc.net/3200205205203/Legacy-of-Dragons-Emergence-by-T-D-Raufson.pdf
    • http://xiixmcuin.linkpc.net/4200205202207205/Emergence-The-Machine-Chronicles-1-by-John-Stagman.pdf
    • http://xiixmcuin.linkpc.net/2209202206203208/Emergence-From-Chaos-To-Order-by-John-H-Holland.pdf
    • http://xiixmcuin.linkpc.net/4206201201206203/Emergence-Labeled-Autistic-by-Temple-Grandin.pdf
    • http://xiixmcuin.linkpc.net/8202207207208202/Rupture-On-the-Emergence-of-the-Political-by-Paul-Eisenstein.pdf
    • http://xiixmcuin.linkpc.net/1202206208208204/Emergence-Eden-s-Root-Trilogy-3-by-Rachel-Fisher.pdf
    • http://xiixmcuin.linkpc.net/5206206206202200/Etched-in-Stone-The-Emergence-of-the-Decalogue-by-David-H-Aaron.pdf
    • http://xiixmcuin.linkpc.net/4203208206206/In-Search-of-Memory-The-Emergence-of-a-New-Science-of-Mind-by-Eric-R-Kandel.pdf
    • http://xiixmcuin.linkpc.net/4209203205201205/Emergence-Dave-vs-the-Monsters-David-Hooper-1-by-John-Birmingham.pdf
    • http://xiixmcuin.linkpc.net/9207208204208201/Philosophy-and-Simulation-The-Emergence-of-Synthetic-Reason-by-Manuel-De-Landa.pdf
    • http://xiixmcuin.linkpc.net/9205202205201200/How-New-Is-the-New-Testament-First-Century-Judaism-and-the-Emergence-of-Christianity-by-Donald-A-Hagner.pdf
    • http://xiixmcuin.linkpc.net/9200200209204209/Between-the-Novel-and-the-News-The-Emergence-of-American-Women-s-Writing-by-Sari-Edelstein.pdf
    • http://xiixmcuin.linkpc.net/7202201206200/Emergence-A-Six-Novel-of-Machine-Intelligence-Six-AI-Series-Book-1-by-Calvin-J-Brown.pdf
    • http://xiixmcuin.linkpc.net/4207207205203/Iridescent-Light-The-Emergence-of-Northwest-Art-by-Deloris-Tarzan-Ament.pdf
    • http://xiixmcuin.linkpc.net/9207208206204202/Philosophy-and-Simulation-The-Emergence-of-Synthetic-Reason-by-Manuel-Delanda.pdf
    • http://xiixmcuin.linkpc.net/1200203203207206206/Article-Emergence-in-Old-English-A-Constructionalist-Perspective-by-Lotte-Sommerer.pdf
    • http://xiixmcuin.linkpc.net/4206201201206203/Emergence-Labeled-Autistic-by-Temple-Gra