Malicious PDF — malware analysis report

Static analysis result for SHA-256 58dd309840af3c5c…

MALICIOUS

PDF

14.1 KB Created: 2019-05-03 12:25:00 +01:00 Authoring application: mPDF 5.7
MD5: 8c59487a6dd92dc3c6c9b316e0badab6 SHA-1: b6e7e22bed6a0d03fbb7ce30ac39e9968afca1a7 SHA-256: 58dd309840af3c5c85e5bfcd87e6cb5fe3f3fa14d50c941d23b64928b168229f
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF file contains a large number of embedded links, identified by the PDF_SEO_LINK_FARM heuristic, which point to various book titles hosted on loaminoo.linkpc.net. While the URLs themselves are currently marked as benign, the sheer volume and structure suggest a link farm or SEO spamming operation, potentially used as a lure or to distribute further malicious content. No scripts were extracted from this sample.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/5096098096/Rise-of-the-Isle-of-the-Lost-Descendants-3-by-Melissa-de-la-Cruz.pdf
    • http://loaminoo.linkpc.net/8092098/The-Isle-of-the-Lost-Descendants-1-by-Melissa-de-la-Cruz.pdf
    • http://loaminoo.linkpc.net/7091099094098/The-Isle-of-the-Lost-Descendants-1-by-Melissa-de-la-Cruz.pdf
    • http://loaminoo.linkpc.net/3093096095098/The-Isle-of-the-Lost-by-Melissa-de-la-Cruz.pdf
    • http://loaminoo.linkpc.net/2095099093091099/Bound-by-Prophecy-Descendants-1-by-Melissa-Wright.pdf
    • http://loaminoo.linkpc.net/1098092098091093/Cat-s-Meow-by-Melissa-de-la-Cruz.pdf
    • http://loaminoo.linkpc.net/2093096094091092/29-Boyfriends-by-Melissa-de-la-Cruz.pdf
    • http://loaminoo.linkpc.net/6098098092099/Wolf-Pact-by-Melissa-de-la-Cruz.pdf
    • http://loaminoo.linkpc.net/7098097093/Love-amp-War-Alex-amp-Eliza-2-by-Melissa-de-la-Cruz.pdf
    • http://loaminoo.linkpc.net/1097095092090098/Golden-Heart-of-Dread-3-by-Melissa-de-la-Cruz.pdf
    • http://loaminoo.linkpc.net/1098092097096092/Birthday-Vicious-The-Ashleys-3-by-Melissa-de-la-Cruz.pdf
    • http://loaminoo.linkpc.net/1098092097096098/Lip-Gloss-Jungle-The-Ashleys-4-by-Melissa-de-la-Cruz.pdf
    • http://loaminoo.linkpc.net/4093096095090094/Masquerade-Blue-Bloods-2-by-Melissa-de-la-Cruz.pdf
    • http://loaminoo.linkpc.net/2093095097097090/The-Queen-s-Secret-Untitled-1-by-Melissa-de-la-Cruz.pdf
    • http://loaminoo.linkpc.net/7090093092099/Frozen-Heart-of-Dread-1-by-Melissa-de-la-Cruz.pdf
    • http://loaminoo.linkpc.net/4090099099098091/Frozen-Heart-of-Dread-1-by-Melissa-de-la-Cruz.pdf
    • http://loaminoo.linkpc.net/2091094095095097/White-Nights-A-Vampires-of-Manhattan-Novel-by-Melissa-de-la-Cruz.pdf
    • http://loaminoo.linkpc.net/4091098090095099/Keys-to-the-Repository-Blue-Bloods-4-5-by-Melissa-de-la-Cruz.pdf
    • http://loaminoo.linkpc.net/1090092090094096/Witches-of-East-End-The-Beauchamp-Family-1-by-Melissa-de-la-Cruz.pdf
    • http://loaminoo.linkpc.net/1098092098094091/The-Strip-Angels-on-Sunset-Boulevard-3-by-Melissa-de-la-Cruz.pdf
    • http://loaminoo.linkpc.net/2093095097097090/The-Queen-s-Se

Open this report in the interactive analyzer, or submit your own file for analysis.