Malicious PDF — malware analysis report

Static analysis result for SHA-256 80b651f9cd21e6ce…

MALICIOUS

PDF

31.9 KB Created: 2019-05-02 05:45:48 +01:00 Authoring application: mPDF 5.7
MD5: 825ed35d0263e733dd2443f6437e1859 SHA-1: 07c475c59eef865b6d774d0c22138d3f76d964df SHA-256: 80b651f9cd21e6ce1fea0c1139fa82166b0bb445b8dd87f25d77c48f9055598f
60 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell

The PDF contains a large number of embedded links to external PDF files, a technique often used for SEO poisoning or to distribute malicious content. The domain 'loaminoo.linkpc.net' appears to be dynamically generated and hosts numerous book-themed PDFs, suggesting a link farm or content distribution network for malicious purposes. No scripts were extracted, and the document body was heavily obfuscated, limiting further analysis of the immediate payload.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/1091092091098099093/The-Passion-The-True-Story-of-an-Event-That-Changed-Human-History-by-G-za-Verm-s.pdf
    • http://loaminoo.linkpc.net/3090093099092098/Brain-Robbers-How-Alcohol-Cocaine-Nicotine-and-Opiates-Have-Changed-Human-History-by-Frances-R-Frankenburg.pdf
    • http://loaminoo.linkpc.net/2098095095091093/Rigged-The-True-Story-of-an-Ivy-League-Kid-Who-Changed-the-World-of-Oil-from-Wall-Street-to-Dubai-by-Ben-Mezrich.pdf
    • http://loaminoo.linkpc.net/3096092091093/Small-Sacrifices-A-True-Story-of-Passion-and-Murder-by-Ann-Rule.pdf
    • http://loaminoo.linkpc.net/7091099093095091/Letter-from-Alabama-The-Inspiring-True-Story-of-Strangers-Who-Saved-a-Child-and-Changed-a-Family-Forever-by-David-L-Workman.pdf
    • http://loaminoo.linkpc.net/1097097091093094/Fighting-the-Devil-A-True-Story-of-Consuming-Passion-Deadly-Poison-and-Murder-by-Jeannie-Walker.pdf
    • http://loaminoo.linkpc.net/4098091098090094/Fighting-the-Devil-A-True-Story-of-Consuming-Passion-Deadly-Poison-and-Murder-by-Jeannie-Walker.pdf
    • http://loaminoo.linkpc.net/1090090099098/The-Tale-of-the-Dueling-Neurosurgeons-The-History-of-the-Human-Brain-as-Revealed-by-True-Stories-of-Trauma-Madness-and-Recovery-by-Sam-Kean.pdf
    • http://loaminoo.linkpc.net/6099095090096/The-Ultimate-History-of-Video-Games-From-Pong-to-Pokemon---The-Story-Behind-the-Craze-That-Touched-Our-Lives-and-Changed-the-World-by-Steven-L-Kent.pdf
    • http://loaminoo.linkpc.net/9092097098092099/Many-Lives-Many-Masters-The-True-Story-of-a-Prominent-Psychiatrist-His-Young-Patient-and-the-Past-Life-Therapy-That-Changed-Both-Their-Lives-by-Brian-L-Weiss.pdf
    • http://loaminoo.linkpc.net/5091099091096/The-Tale-of-the-Dueling-Neurosurgeons-And-Other-True-Stories-of-Trauma-Madness-Affliction-and-Recovery-That-Reveal-the-Surprising-History-of-the-Human-Brain-by-Sam-Kean.pdf
    • http://loaminoo.linkpc.net/5090090095093097/Proust-s-Overcoat-The-True-Story-of-One-Man-s-Passion-for-All-Things-Proust-by-Lorenza-Foschini.pdf
    • http://loaminoo.linkpc.net/1098092092098090/Batavia-s-Graveyard-The-True-Story-of-the-Mad-Heretic-Who-Led-History-s-Bloodiest-Mutiny-by-Mike-Dash.pdf
    • http://loaminoo.linkpc.net/2093098096091093/A-Kim-Jong-Il-Production-The-Incredible-True-Story-of-North-Korea-and-the-Most-Audacious-Kidnapping-in-History-by-Paul-Fischer.pdf
    • http://loaminoo.linkpc.net/3098091099097090/The-Geographical-History-of-America-Or-the-Relation-of-Human-Nature-to-the-Human-Mind-by-Gertrude-Stein.pdf
    • http://loaminoo.linkpc.net/4099098097099/The-Event-in-Science-History-Philosophy-amp-Art-by-Yeshayahu-Ben-Aharon.pdf
    • http://loaminoo.linkpc.net/8094096093/Indianapolis-The-True-Story-of-the-Worst-Sea-Disaster-in-U-S-Naval-History-and-the-Fifty-Year-Fight-to-Exonerate-an-Innocent-Man-by-Lynn-Vincent.pdf
    • http://loaminoo.linkpc.net/1091090095096091/Mermaid-Queen-The-Spectacular-True-Story-Of-Annette-Kellerman-Who-Swam-Her-Way-To-Fame-Fortune-Swimsuit-History-by-Shana-Corey.pdf
    • http://loaminoo.linkpc.net/1090096094091096/Harry-a-History-The-True-Story-of-a-Boy-Wizard-His-Fans-and-Life-Inside-the-Harry-Potter-Phenomenon-by-Melissa-Anelli.pdf
    • http://loaminoo.linkpc.net/3090093092098090/Harry-a-History-The-True-Story-of-a-Boy-Wizard-His-Fans-and-Life-Inside-the-Harry-Potter-Phenomenon-by-Melissa-Anelli.pdf
    • http://loaminoo.linkpc.net/7091099093095091/Letter-

Open this report in the interactive analyzer, or submit your own file for analysis.