Malicious PDF — malware analysis report

Static analysis result for SHA-256 5423995091310309…

MALICIOUS

PDF

14.3 KB Created: 2019-05-03 06:27:37 +01:00 Authoring application: mPDF 5.7
MD5: 7ef20700b7f1e2b459f9269c8d6df302 SHA-1: 0a33b93d6c6cade4f77ac9c2816f352a8fad134d SHA-256: 5423995091310309c62a38d4cbb5716ddc8f8176c41be4ed6ecb0575ffc58062
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1059.001 PowerShell

The PDF contains a large number of embedded links to external PDF files, a technique often used for SEO poisoning or to distribute malicious content. The heuristic 'PDF_SEO_LINK_FARM' indicates a mass external link farm. While the URLs themselves are currently marked as benign, the sheer volume and nature of the links suggest a malicious intent to drive traffic or distribute further payloads. No scripts were extracted from this sample.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/1732739739730733/Spider-Bites-II-Spider-2-by-J-R-Wright.pdf
    • http://cefasfese.4pu.com/6738734732738738/Spider-Man-Spider-Verse---Fearsome-Foes-Spider-Man-Enter-The-Spider-Verse-2018-Book-1-by-Stan-Lee.pdf
    • http://cefasfese.4pu.com/3733737738731736/Ultimate-Comics-Spider-Man-Death-of-Spider-Man-Fallout-by-Brian-Michael-Bendis.pdf
    • http://cefasfese.4pu.com/1739733732738732/Spider-Woman-Volume-1-Spider-Verse-by-Dennis-Hopeless.pdf
    • http://cefasfese.4pu.com/6733735735739736/Amazing-Spider-Man-Vol-3-Spider-Verse-by-Dan-Slott.pdf
    • http://cefasfese.4pu.com/8731737731735734/Spider-Man-The-Fantastic-Spider-Man-by-Dan-Slott.pdf
    • http://cefasfese.4pu.com/2732731733731732/The-Web-of-the-Spider-by-Herb-Bailey.pdf
    • http://cefasfese.4pu.com/9733738734/Along-Came-a-Spider-by-James-Patterson.pdf
    • http://cefasfese.4pu.com/5738730734733/Along-Came-a-Spider-by-James-Patterson.pdf
    • http://cefasfese.4pu.com/3734731732737736/Along-Came-a-Spider-by-James-Patterson.pdf
    • http://cefasfese.4pu.com/7730732731732/The-Spider-and-the-Fly-by-Mary-Howitt.pdf
    • http://cefasfese.4pu.com/2736733739730738/The-Spider-by-Elise-Gravel.pdf
    • http://cefasfese.4pu.com/4734732738735736/Spider-Man-The-Other-by-Peter-David.pdf
    • http://cefasfese.4pu.com/1739736736730737/Spider-Eaters-by-Rae-Yang.pdf
    • http://cefasfese.4pu.com/3733733730737730/Spider-Man-Brand-New-Day-Vol-1-by-Dan-Slott.pdf
    • http://cefasfese.4pu.com/3733732739731735/Spider-Man-2-by-Peter-David.pdf
    • http://cefasfese.4pu.com/3733733731735738/Spider-Girl-by-Tom-DeFalco.pdf
    • http://cefasfese.4pu.com/3730732734730731/Spider-Boy-by-Ralph-Fletcher.pdf
    • http://cefasfese.4pu.com/3733731739730737/Spider-Man-by-Peter-David.pdf
    • http://cefasfese.4pu.com/1739733734734734/Spider-Man-vs-Silver-Sable-by-Tom-DeFalco.pdf
    • http://cefasfese.4pu.com/2736733739730738/The-Spider-by-El

Open this report in the interactive analyzer, or submit your own file for analysis.