Malicious PDF — malware analysis report

Static analysis result for SHA-256 7abc608691ffc414…

MALICIOUS

PDF

17.6 KB Created: 2019-05-01 19:33:19 +01:00 Authoring application: mPDF 5.7
MD5: 800653e364b1218328d7f7b6c43f49e5 SHA-1: 3ba9a137527ff996c9fca4f33af1899c6c8588c6 SHA-256: 7abc608691ffc4147c74eeda0816705bca5e7168af0c5a8b93f6b1dee48046b7
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF contains a large number of embedded URLs, identified as a PDF_SEO_LINK_FARM heuristic. While the URLs themselves are marked as benign, the sheer volume and structure suggest an attempt to manipulate search engine results or distribute content through a link farm. No scripts were extracted from this sample, limiting further analysis of its behavior. The primary attack pattern appears to be the distribution of a link farm within a PDF document.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/3097099090/The-Obelisk-Gate-The-Broken-Earth-2-by-N-K-Jemisin.pdf
    • http://loaminoo.linkpc.net/2098095094097095/The-Obelisk-Gate-The-Broken-Earth-2-by-N-K-Jemisin.pdf
    • http://loaminoo.linkpc.net/4092098091097096/The-Fifth-Season-The-Broken-Earth-1-by-N-K-Jemisin.pdf
    • http://loaminoo.linkpc.net/4098091094099091/The-Broken-Kingdoms-by-N-K-Jemisin.pdf
    • http://loaminoo.linkpc.net/2095093092096/The-Broken-Kingdoms-Inheritance-2-by-N-K-Jemisin.pdf
    • http://loaminoo.linkpc.net/7097091090096096/The-Broken-Gate-Sphinx-Gate-1-by-Lea-Sheppard.pdf
    • http://loaminoo.linkpc.net/3097090093095098/The-Death-Gate-Cycle-Novels-The-Death-Gate-Cycle-Into-the-Labyrinth-the-Hand-of-Chaos-Dragon-Wing-Serpent-Mage-the-Seventh-Gate-Fire-Sea-by-Books-LLC.pdf
    • http://loaminoo.linkpc.net/2091096091099091/Law-of-the-Broken-Earth-Griffin-Mage-3-by-Rachel-Neumeier.pdf
    • http://loaminoo.linkpc.net/1098095099093094/Broken-Earth-The-Rural-Chinese-by-Steven-W-Mosher.pdf
    • http://loaminoo.linkpc.net/9096095096098090/The-Black-Obelisk-The-Arc-de-Triomphe-The-Night-in-Lisbon-by-Erich-Maria-Remarque.pdf
    • http://loaminoo.linkpc.net/1090099099099090099/Battle-Gate---Die-Legenden-der-Festung-zwischen-den-Sph-ren-2-1-Bl-ten-des-Kaiserreiches-Battle-Gate-Staffel-2-by-Wotan-Winterschmied.pdf
    • http://loaminoo.linkpc.net/2091094091099098/The-Awakened-Kingdom-Inheritance-3-5-by-N-K-Jemisin.pdf
    • http://loaminoo.linkpc.net/2094097091094/The-City-Born-Great-by-N-K-Jemisin.pdf
    • http://loaminoo.linkpc.net/1090099099099091093/Battle-Gate-III-Teil-2-Die-R-ckkehr-der-Weltenwanderer-Battle-Gate-Staffel-3-by-Wotan-Winterschmied.pdf
    • http://loaminoo.linkpc.net/3090099091097096/The-Devil-s-Gate-The-Devil-s-Gate-Trilogy-Book-1-by-Rue-Volley.pdf
    • http://loaminoo.linkpc.net/1097093098097092/Broken-Hearts-Kaleigh-s-Revenge-Broken-Wings-2-by-Sandra-Love.pdf
    • http://loaminoo.linkpc.net/1090099099091099/The-Forever-Gate-The-Forever-Gate-1-by-Isaac-Hooke.pdf
    • http://loaminoo.linkpc.net/3092094092095097/The-Traveler-s-Gate-Trilogy-Traveler-s-Gate-1-3-by-Will-Wight.pdf
    • http://loaminoo.linkpc.net/1096091096093090/The-Forever-Gate-The-Forever-Gate-1-by-Isaac-Hooke.pdf
    • http://loaminoo.linkpc.net/3094099097097096/Beneath-the-Broken-Moon-Part-One-Broken-1-by-Sarah-M-kel-.pdf
    • http://loaminoo.linkpc.net/9096095096098090/The-Black-Obelisk-The-Arc-de-

Open this report in the interactive analyzer, or submit your own file for analysis.