Malicious PDF — malware analysis report

Static analysis result for SHA-256 7df6fe114bcc5d31…

MALICIOUS

PDF

16.9 KB Created: 2019-04-30 07:59:36 +01:00 Authoring application: mPDF 5.7
MD5: 815703ad869f4fb1b708c233c03b78e6 SHA-1: 74afe9c2340686a9cf96cceedbc6a6a9a6b51c53 SHA-256: 7df6fe114bcc5d31552d7468ca577b919296c836607fa48abf848536afc64e2f
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF file contains a large number of embedded links, identified by the PDF_SEO_LINK_FARM heuristic. These links point to various book titles hosted on the 'loaminoo.linkpc.net' domain. While the document body is heavily corrupted, the presence of numerous external links suggests a potential attempt at SEO manipulation or distributing malicious content disguised as legitimate documents. No scripts were extracted from this sample.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/2091096099091094/Uncovering-Secrets-Rosemont-Saga-3-by-Barbara-Hinske.pdf
    • http://loaminoo.linkpc.net/2091096098098098/Weaving-the-Strands-Rosemont-Saga-2-by-Barbara-Hinske.pdf
    • http://loaminoo.linkpc.net/3099095091095098/Uncovering-Her-Secrets-Seals-Security-2-by-Michelle-Woods.pdf
    • http://loaminoo.linkpc.net/2091095092098091/Out-on-the-Wire-Uncovering-the-Secrets-of-Radio-s-New-Masters-of-Story-with-Ira-Glass-by-Jessica-Abel.pdf
    • http://loaminoo.linkpc.net/3095094093094097/Uncovering-You-8-Redemption-Uncovering-You-8-by-Scarlett-Edwards.pdf
    • http://loaminoo.linkpc.net/1094097092097098/Uncovering-You-2-Submission-Uncovering-You-2-by-Scarlett-Edwards.pdf
    • http://loaminoo.linkpc.net/8094097095/The-Art-of-Inheriting-Secrets-by-Barbara-O-39-Neal.pdf
    • http://loaminoo.linkpc.net/3095090094093091/The-Secrets-She-Carried-by-Barbara-Davis.pdf
    • http://loaminoo.linkpc.net/1092094093095/Callan-s-Proposition-Secrets-4-by-Barbara-McCauley.pdf
    • http://loaminoo.linkpc.net/4092098097096096/Secrets-You-Tell-Me-Yours-and-I-ll-Tell-You-Mine-Maybe-by-Barbara-Becker-Holstein.pdf
    • http://loaminoo.linkpc.net/1092094099093/Secret-Baby-Santos-Secrets-2-by-Barbara-McCauley.pdf
    • http://loaminoo.linkpc.net/6094090090098/To-Be-the-Best-Emma-Harte-Saga-3-by-Barbara-Taylor-Bradford.pdf
    • http://loaminoo.linkpc.net/1091090098097095095/The-Suburbs-Have-Secrets-Sadie-McIntyre-Mystery-1-by-Barbara-Wallace.pdf
    • http://loaminoo.linkpc.net/7093093094095097/Maia-and-the-Secrets-of-Zagran-The-Lightbound-Saga-2-by-S-G-Basu.pdf
    • http://loaminoo.linkpc.net/4095094097099098/Lifeline-The-Bayou-Secrets-Saga-2-by-Judy-McDonough.pdf
    • http://loaminoo.linkpc.net/7095090091095096/The-Rise-and-Fall-of-the-Dil-Pickle-by-Franklin-Rosemont.pdf
    • http://loaminoo.linkpc.net/2090091096090092/Journey-The-Beginning-A-Prequel-to-the-Secrets-Saga-by-Angee-Taylor.pdf
    • http://loaminoo.linkpc.net/1095095097096097/Regarding-the-Trees-A-Splintered-Saga-Rooted-in-Secrets-by-Kate-Klise.pdf
    • http://loaminoo.linkpc.net/1090094096093098094/Secrets-of-an-Organized-Mom-How-to-Declutter-and-Streamline-Your-Home-for-a-Happier-Family-by-Barbara-Reich.pdf
    • http://loaminoo.linkpc.net/5092099096098098/Whispers-from-the-Cove-Smoky-Mountain-Secrets-Saga-Book-1-by-Jeanne-Hardt.pdf
    • http://loaminoo.linkpc.net/30

Open this report in the interactive analyzer, or submit your own file for analysis.