Malicious PDF — malware analysis report

Static analysis result for SHA-256 7dc09a3856e4b41e…

MALICIOUS

PDF

21.6 KB Created: 2020-03-16 22:08:14 +00:00 Authoring application: mPDF 5.7
MD5: 760eb14e6282945534550b81098ccb95 SHA-1: b9e82816ab95d58a45d3f05caa19ee1283355f20 SHA-256: 7dc09a3856e4b41e2312e91a0ffdd31ea48da676749b63030a436680c9ac33a5
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF file contains a large number of embedded URLs, identified as a link farm. These URLs likely serve to manipulate search engine rankings or redirect users to malicious content. The document body itself is heavily obfuscated, preventing a clear understanding of its direct purpose beyond hosting these links. No scripts were extracted from this sample.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://lwoscmobook.myhome.cx/252495241524652485248/Dope-Menace-The-Sensational-World-of-Drug-Paperbacks-1900-1975-by-Stephen-J-Gertz.pdf
    • http://lwoscmobook.myhome.cx/452475240524252485245/Merchant-Kings-When-Companies-Ruled-the-World-1600---1900-by-Stephen-R-Bown.pdf
    • http://lwoscmobook.myhome.cx/152465240524952475246/Dope-Boy-Magic-Dope-Boyz-1-by-Gavin-M-L-Fletcher.pdf
    • http://lwoscmobook.myhome.cx/952405242524352455245/Wood---World-Aus-The-British-Library-General-Catalogue-of-Printed-Books-to-1975-355-by-Jim-Emmett.pdf
    • http://lwoscmobook.myhome.cx/952405242524452495247/World---Wyeth-Aus-The-British-Library-General-Catalogue-of-Printed-Books-to-1975-356-by-Jim-Emmett.pdf
    • http://lwoscmobook.myhome.cx/252415246524652425241/The-Playground-Zone-by-Andrea-Grayson-Gertz.pdf
    • http://lwoscmobook.myhome.cx/552405248524552435249/Law-and-Colonial-Cultures-Legal-Regimes-in-World-History-1400-1900-by-Lauren-Benton.pdf
    • http://lwoscmobook.myhome.cx/1524152425246524752485242/Satires-of-Persius-Bristol-Classical-Paperbacks-by-Cynthia-S-Dessen.pdf
    • http://lwoscmobook.myhome.cx/352475243524852475245/The-Diary-of-Dennis-the-Menace-The-Diary-of-Dennis-the-Menace-1-by-Steven-Butler.pdf
    • http://lwoscmobook.myhome.cx/95247524252455240/Dope-by-Sara-Gran.pdf
    • http://lwoscmobook.myhome.cx/652425240524752445246/Drug-Gang-Drug-Gang-1-by-Neil-Walker.pdf
    • http://lwoscmobook.myhome.cx/152465245524252405246/Dope-Thief-by-Dennis-Tafoya.pdf
    • http://lwoscmobook.myhome.cx/252425248524952405244/Dope-Sick-by-Walter-Dean-Myers.pdf
    • http://lwoscmobook.myhome.cx/252475249524352425248/Sonic-Youth-Sensational-Fix-by-Roland-Groenenboom.pdf
    • http://lwoscmobook.myhome.cx/952415241524152405242/The-Art-of-the-Chocolatier-From-Classic-Confections-to-Sensational-Showpieces-by-Ewald-Notter.pdf
    • http://lwoscmobook.myhome.cx/252465249524852405248/No-Part-of-the-World-by-Stephen-Dawson.pdf
    • http://lwoscmobook.myhome.cx/352485248524352445242/The-Penny-Dreadful-Or-Strange-Horrid-amp-Sensational-Tales-by-Peter-Haining.pdf
    • http://lwoscmobook.myhome.cx/452405242524852445243/Marvelous-Possessions-The-Wonder-of-the-New-World-by-Stephen-Greenblatt.pdf
    • http://lwoscmobook.myhome.cx/152465247524452405240/The-Swerve-How-the-World-Became-Modern-by-Stephen-Greenblatt.pdf
    • http://lwoscmobook.myhome.cx/152465241524852465245/The-Madman-and-the-Butcher-the-Sensational-Wars-of-Sam-Hughes-and-General-Arthur-Currie-by-Tim-Cook.pdf
    • http://lwoscmobook.myhome.cx/9

Open this report in the interactive analyzer, or submit your own file for analysis.