Malicious PDF — malware analysis report

Static analysis result for SHA-256 7a874b0ef252f3fa…

MALICIOUS

PDF

16.8 KB Created: 2019-05-02 00:44:49 +01:00 Authoring application: mPDF 5.7
MD5: 4ca361705cd41d46bd7d290c2943ab6e SHA-1: f4046ed3b9a88556407d740b8ae63fff6e46a9ce SHA-256: 7a874b0ef252f3fa28d32eac6e0fb44ed534d985ce67ad3a25178fa0e8a9a3ae
120 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1059.001 PowerShell

The PDF file contains a large number of embedded URLs, identified as a link farm, which is a common tactic for distributing malicious content or phishing pages. The ClamAV detection of 'Pdf.Dropper.Agent' further supports its malicious nature. The embedded URLs likely serve as a lure to redirect users to potentially harmful sites or download further malware. No scripts were extracted from this sample.

Heuristics 3

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • ClamAV: Pdf.Dropper.Agent-7202923-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Pdf.Dropper.Agent-7202923-0
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://xiixmcuin.linkpc.net/8208206203200203/Hammett-s-Moral-Vision-The-Most-Influential-In-Depth-Analysis-of-Dashiell-Hammett-s-Novels-Red-Harvest-The-Dain-Curse-The-Maltese-Falcon-The-Glass-Key-and-The-Thin-Man-by-George-J-Thompson.pdf
    • http://xiixmcuin.linkpc.net/1200202203202202202/The-Maltese-Falcon-And-Other-Sam-Spade-Stories-The-Ultimate-Dashiell-Hammett-by-Dashiell-Hammett.pdf
    • http://xiixmcuin.linkpc.net/8208206203200200/The-Assistant-Murderer-and-Other-Stories-by-Dashiell-Hammett-by-Dashiell-Hammett.pdf
    • http://xiixmcuin.linkpc.net/8208206200202208/The-Four-Great-Novels-Red-Harvest-The-Dain-Curse-The-Maltese-Falcon-The-Glass-Key-by-Dashiell-Hammett.pdf
    • http://xiixmcuin.linkpc.net/8208205209208207/Hammett-Homicides-by-Dashiell-Hammett.pdf
    • http://xiixmcuin.linkpc.net/4200202205206209/The-Thin-Man-by-Dashiell-Hammett.pdf
    • http://xiixmcuin.linkpc.net/7209201207209/The-Continental-Op-by-Dashiell-Hammett.pdf
    • http://xiixmcuin.linkpc.net/8208206201205202/The-Red-Brain-by-Dashiell-Hammett.pdf
    • http://xiixmcuin.linkpc.net/8208206200204200/The-Tenth-Clew-by-Dashiell-Hammett.pdf
    • http://xiixmcuin.linkpc.net/8208206200203209/The-Return-of-the-Continental-Op-by-Dashiell-Hammett.pdf
    • http://xiixmcuin.linkpc.net/8203208202202209/Jungle-urbaine-by-Dashiell-Hammett.pdf
    • http://xiixmcuin.linkpc.net/8208205209202200/Return-of-the-Thin-Man-by-Dashiell-Hammett.pdf
    • http://xiixmcuin.linkpc.net/6208201204205207/Zigzags-of-Treachery-by-Dashiell-Hammett.pdf
    • http://xiixmcuin.linkpc.net/1200202208205200206/El-halc-n-malt-s-by-Dashiell-Hammett.pdf
    • http://xiixmcuin.linkpc.net/1206206208203209/Woman-in-the-Dark-by-Dashiell-Hammett.pdf
    • http://xiixmcuin.linkpc.net/1208206203204209/Secret-Agent-X-9-by-Dashiell-Hammett.pdf
    • http://xiixmcuin.linkpc.net/8208205209202201/Dashiell-Hammett-A-Life-by-Diane-Johnson.pdf
    • http://xiixmcuin.linkpc.net/8208206202209209/The-Giant-Collection-of-the-Continental-Op-by-Dashiell-Hammett.pdf
    • http://xiixmcuin.linkpc.net/1200202203201202208/Dashiell-Hammett-A-Retrospective-Anthology-by-Jack-Adrian.pdf
    • http://xiixmcuin.linkpc.net/6209208202202/The-Maltese-Falcon-The-Thin-Man-Red-Harvest-by-Dashiell-Hammett.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.