Malicious PDF — malware analysis report

Static analysis result for SHA-256 8707222c6695d5cb…

MALICIOUS

PDF

14.7 KB Created: 2019-04-30 05:04:27 +01:00 Authoring application: mPDF 5.7
MD5: 8c9c9cccb27d03a45d47a65be464250a SHA-1: b8f27de34fbc10c142c0f089d2fcf2429da0fefa SHA-256: 8707222c6695d5cb8d24ee52feea03b2d8d609e497c98a971de423d090fdfedb
60 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell

The PDF file contains a large number of embedded links to external PDF documents, forming a link farm. While the individual links are marked as benign, the sheer volume and the heuristic firing of 'PDF_SEO_LINK_FARM' suggest a malicious intent to distribute or redirect users to potentially harmful content. No scripts were extracted, and the document body was heavily corrupted, limiting further analysis.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/1092099090098098/Fatty-Legs-by-Christy-Jordan-Fenton.pdf
    • http://loaminoo.linkpc.net/2098099096095092/A-Stranger-at-Home-by-Christy-Jordan-Fenton.pdf
    • http://loaminoo.linkpc.net/2099093096095099/Legs-Talk-Let-Your-Legs-do-the-Talking-by-D-E-Boone.pdf
    • http://loaminoo.linkpc.net/1097095095093093/Daddy-Long-Legs-amp-Dear-Enemy-Daddy-Long-Legs-1-2-by-Jean-Webster.pdf
    • http://loaminoo.linkpc.net/2098090093096095/The-Christy-Miller-Books-5-8-Christy-Miller-5-8-by-Robin-Jones-Gunn.pdf
    • http://loaminoo.linkpc.net/6098092092097/Christy-Miller-Collection-Vol-4-Christy-Miller-10-12-by-Robin-Jones-Gunn.pdf
    • http://loaminoo.linkpc.net/1090092095098098/Christy-Miller-Collection-Vol-2-Christy-Miller-4-6-by-Robin-Jones-Gunn.pdf
    • http://loaminoo.linkpc.net/7090092094095/Dear-Fatty-by-Dawn-French.pdf
    • http://loaminoo.linkpc.net/1090095095090091/Fatty-Batter-by-Michael-Simkins.pdf
    • http://loaminoo.linkpc.net/2097091091095099/Room-1219-The-Life-of-Fatty-Arbuckle-the-Mysterious-Death-of-Virginia-Rappe-and-the-Scandal-That-Changed-Hollywood-by-Greg-Merritt.pdf
    • http://loaminoo.linkpc.net/5097099091/The-Good-Widow-by-Liz-Fenton.pdf
    • http://loaminoo.linkpc.net/7094090091091/The-Dog-on-the-Tuckerbox-by-Corinne-Fenton.pdf
    • http://loaminoo.linkpc.net/2091096096099094/Legs-by-Angela-Lam.pdf
    • http://loaminoo.linkpc.net/5094098096090090/I-m-With-Fatty-Losing-Fifty-Pounds-in-Fifty-Miserable-Weeks-by-Edward-Ugel.pdf
    • http://loaminoo.linkpc.net/5090092096097092/The-Colours-Of-Snow-by-Kate-Fenton.pdf
    • http://loaminoo.linkpc.net/1099092094095093/Clamor-Poems-by-Elyse-Fenton.pdf
    • http://loaminoo.linkpc.net/1091097097091094/Broken-Treaty-by-Steve-Fenton.pdf
    • http://loaminoo.linkpc.net/1095092093099/The-Refugee-Summer-by-Edward-Fenton.pdf
    • http://loaminoo.linkpc.net/2090091094096096/The-Duke-s-Holiday-by-Maggie-Fenton.pdf
    • http://loaminoo.linkpc.net/1092093096099099/Dinner-for-Rashid-by-Peter-H-Fenton.pdf
    • http://loaminoo.linkpc.net/2097091091095099/Room-1219-The-Life-of-Fatty-Arbu

Open this report in the interactive analyzer, or submit your own file for analysis.