Malicious PDF — malware analysis report

Static analysis result for SHA-256 5486431bc24e1404…

MALICIOUS

PDF

19.2 KB Created: 2019-05-02 17:30:07 +01:00 Authoring application: mPDF 5.7
MD5: 876be2fd731ea0f9daf7d9a5dbb4e482 SHA-1: fda76b56d7151ac6c56757a467327110651be0b7 SHA-256: 5486431bc24e140451777155a01c823f53d66fb8cfbf9d94875e28f89951a296
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1059.001 PowerShell

The PDF contains a large number of embedded URLs, identified as a link farm. While the URLs themselves are currently flagged as benign, the sheer volume and the heuristic firing indicate a malicious intent, likely for SEO manipulation or to distribute further malicious content. No scripts were extracted from this sample, limiting the ability to determine a specific payload delivery mechanism.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://xiixmcuin.linkpc.net/5209202206205203/Special-A-Vol-17-Special-A-17-by-Maki-Minami.pdf
    • http://xiixmcuin.linkpc.net/2201203205204209/Special-A-Vol-12-Special-A-12-by-Maki-Minami.pdf
    • http://xiixmcuin.linkpc.net/2201203205205203/Special-A-Vol-11-Special-A-11-by-Maki-Minami.pdf
    • http://xiixmcuin.linkpc.net/2201203205206202/Special-A-Vol-14-Special-A-14-by-Maki-Minami.pdf
    • http://xiixmcuin.linkpc.net/8203208208202/The-Best-of-Elaine-Raco-Chase-A-Dream-Come-True-No-Easy-Way-Out-2-Books-in-1-by-Elaine-Raco-Chase.pdf
    • http://xiixmcuin.linkpc.net/4209202201205209/Selected-Poems-Elaine-Feinstein-by-Elaine-Feinstein.pdf
    • http://xiixmcuin.linkpc.net/8208202208206204/Go-For-It-Schulte-Elaine-L-Ginger-Series-by-Elaine-L-Schulte.pdf
    • http://xiixmcuin.linkpc.net/1206200206208205/Special-Needs-Special-Needs-1-by-K-A-Merikan.pdf
    • http://xiixmcuin.linkpc.net/1200203204205206/Special-Delivery-Special-Delivery-1-by-Heidi-Cullinan.pdf
    • http://xiixmcuin.linkpc.net/1206200204200202/Special-Delivery-Special-Delivery-1-by-Heidi-Cullinan.pdf
    • http://xiixmcuin.linkpc.net/2201202208201207/Special-Forces---Mercenaries-Part-II-Special-Forces-2-part-2-by-Aleksandr-Voinov.pdf
    • http://xiixmcuin.linkpc.net/1206200206204209/Special-Forces---Mercenaries-Part-I-Special-Forces-2-part-1-by-Aleksandr-Voinov.pdf
    • http://xiixmcuin.linkpc.net/6205208200206204/The-Best-of-the-Realms-The-Stories-of-Elaine-Cunningham-Forgotten-Realms-The-Best-of-the-Realms-3-by-Elaine-Cunningham.pdf
    • http://xiixmcuin.linkpc.net/1205207205204/Attica-The-Official-Report-of-the-New-York-State-Special-Commission-on-Attica-by-New-York-State-Special-Commision-on-Attica.pdf
    • http://xiixmcuin.linkpc.net/7201208208209203/Limoncello-Tiramisu-Recipe-from-The-Basic-Art-of-Italian-Cooking-Holidays-and-Special-Occasions-2nd-edition-The-Basic-Art-of-Italian-Cooking-Holidays-and-Special-Occasions-2nd-edition-by-Maria-Liberati.pdf
    • http://xiixmcuin.linkpc.net/3201209208202208/A-Different-Sun-by-Elaine-Neil-Orr.pdf
    • http://xiixmcuin.linkpc.net/6205207209202204/Lee-and-Elaine-by-Ann-Rower.pdf
    • http://xiixmcuin.linkpc.net/4203205208202202/Man-at-Work-by-Elaine-Fox.pdf
    • http://xiixmcuin.linkpc.net/3203203208205201/Hot-Stuff-by-Elaine-Fox.pdf
    • http://xiixmcuin.linkpc.net/1201202205207207200/That-s-When-Buzz-Met-Bee-by-Elaine-Kleid.pdf
    • http://xiixmcuin.linkpc.net/2201202208201207/Special-Forces---M

Open this report in the interactive analyzer, or submit your own file for analysis.