Malicious PDF — malware analysis report

Static analysis result for SHA-256 7e92e5e7e1bc5c97…

MALICIOUS

PDF

19.9 KB Created: 2019-05-02 05:22:53 +01:00 Authoring application: mPDF 5.7
MD5: 902796b40b7a7f05a2fe874d69e10104 SHA-1: 9124689b286a4b4ea3469c7b277ea1f03e9c20b0 SHA-256: 7e92e5e7e1bc5c977026c4a080ce18f645abd3336063eb0bc04f1853c7068b47
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF file contains a large number of embedded URLs, identified by the PDF_SEO_LINK_FARM heuristic. While many of these URLs are marked as benign, the sheer volume and the nature of the heuristic suggest a malicious intent, likely for SEO manipulation or to distribute further payloads. No scripts were extracted from this sample. The embedded URLs are the primary indicators of malicious activity.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/2095095097091099/Lee-s-Adjutant-The-Wartime-Letters-of-Colonel-Walter-Herron-Taylor-1862-1865-by-Walter-H-Taylor.pdf
    • http://loaminoo.linkpc.net/6092098098097/The-Life-and-Times-of-James-Walter-Chapman-Taylor-by-Judy-Siers.pdf
    • http://loaminoo.linkpc.net/6097094095093094/Letters-of-Credit-A-View-of-Type-Design-by-Walter-Tracy.pdf
    • http://loaminoo.linkpc.net/1090092096091099/Hudson-Taylor-In-Early-Years--The-Growth-of-a-Soul-by-Howard-Taylor.pdf
    • http://loaminoo.linkpc.net/3096095096090094/Spiritual-Secret-of-Hudson-Taylor-by-Howard-Taylor.pdf
    • http://loaminoo.linkpc.net/9091098099097092/This-Cruel-War-The-Civil-War-Letters-of-Grant-and-Malinda-Taylor-by-Ann-K-Blomquist.pdf
    • http://loaminoo.linkpc.net/5090099095099093/Autumn-of-Glory-The-Army-of-Tennessee-1862-1865-by-Thomas-Lawrence-Connelly.pdf
    • http://loaminoo.linkpc.net/4098097090092099/The-Labyrinth-Memoirs-Of-Walter-Schellenberg-Hitler-s-Chief-Of-Counterintelligence-by-Walter-Schellenberg.pdf
    • http://loaminoo.linkpc.net/1091098099096096099/Walter-Benjamin-Selected-Writings-Volume-1-1913-1926-by-Walter-Benjamin.pdf
    • http://loaminoo.linkpc.net/7094098097096098/Walter-Benjamin-Selected-Writings-4-1938-1940-by-Walter-Benjamin.pdf
    • http://loaminoo.linkpc.net/7090099098094094/The-Whole-Works-of-the-Right-REV-Jeremy-Taylor-Worthy-Communicant-Supplement-of-Sermons-Collection-of-Offices-by-Jeremy-Taylor.pdf
    • http://loaminoo.linkpc.net/8092092090096099/Lady-of-the-Lake-Walter-Scott-1910-by-Walter-Scott.pdf
    • http://loaminoo.linkpc.net/7094098098098097/The-Correspondence-of-Walter-Benjamin-1910-1940-by-Walter-Benjamin.pdf
    • http://loaminoo.linkpc.net/9092093092096098/Walter-Moers-sch-nste-Geschichten-On-the-Road-by-Walter-Moers.pdf
    • http://loaminoo.linkpc.net/2095091093096090/Classic-Science-Fiction-by-Walter-M-Miller-Jr-by-Walter-M-Miller-Jr-.pdf
    • http://loaminoo.linkpc.net/1091091091096094097/Walter-Pichler-Skulpturen-Zeichnungen-Modelle-by-Walter-Pichler.pdf
    • http://loaminoo.linkpc.net/1090099092095098090/Walter-Albrecht-pr-sentiert-Karmann-Ghia-by-Walter-Albrecht.pdf
    • http://loaminoo.linkpc.net/4095092091099095/Cronkite-s-War-His-World-War-II-Letters-Home-by-Walter-Cronkite-IV.pdf
    • http://loaminoo.linkpc.net/4099095092090094/Taylor-Davis-and-the-Flame-of-Findul-Taylor-Davis-1-by-Michelle-Isenhoff.pdf
    • http://loaminoo.linkpc.net/9092093092091091/Novels-by-Walter-Moers-The-13-1-2-Lives-of-Captain-Bluebear-Rumo-and-His-Miraculous-Adventures-the-City-of-Dreaming-Books-Zamonia-1-3-4-Dreaming-Books-1-by-Walter-Moers.pdf
    • http://loaminoo.linkpc.net/4098097090092099/The-Labyrinth-Memoirs-Of-Walter-Schellenberg-Hitler-s-Chief-Of-Counteri

Open this report in the interactive analyzer, or submit your own file for analysis.