Malicious PDF — malware analysis report

Static analysis result for SHA-256 87b9a3fe9be13113…

MALICIOUS

PDF

13.0 KB Created: 2019-04-30 05:29:49 +01:00 Authoring application: mPDF 5.7
MD5: 6b6db8b05e98d46bb6188d1c3aeeada9 SHA-1: ca26c67552689d49f2f6bda1086cc7245c4188a5 SHA-256: 87b9a3fe9be13113e8eb8cc231cbfe873b7f17140f02f577cce4f82b39043fff
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious File

The PDF document contains a large number of embedded URLs, identified as a link farm. The primary heuristic indicates a critical finding related to this link farm, suggesting a malicious intent to direct users to external resources. While the specific purpose of these links is not fully detailed, the sheer volume and the nature of the heuristic point towards a deceptive or harmful distribution mechanism. No scripts were extracted from this sample.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/2090090098096092/Love-Spell-by-Karen-Williams.pdf
    • http://loaminoo.linkpc.net/3095095098090093/Love-Spell-by-Mia-Kerick.pdf
    • http://loaminoo.linkpc.net/1098094096095094/Love-s-Magic-Spell-by-Sable-Hunter.pdf
    • http://loaminoo.linkpc.net/9092098090091/A-Beach-Tail-by-Karen-Lynn-Williams.pdf
    • http://loaminoo.linkpc.net/2099094096096099/Blood-Spell-Vampire-s-Love-2-by-Janice-Harrell.pdf
    • http://loaminoo.linkpc.net/5099096098090091/Teenage-Love-Spell-by-Gabrielle-Dela-Cruz.pdf
    • http://loaminoo.linkpc.net/2092091096095099/Demon-Love-Spell-Vol-4-Ayakashi-Koi-Emaki-4-by-Mayu-Shinjo.pdf
    • http://loaminoo.linkpc.net/1092090093093093/My-Enemy-s-Tears-The-Witch-of-Northampton-by-Karen-Vorbeck-Williams.pdf
    • http://loaminoo.linkpc.net/3092097095091094/The-Love-Spell-An-Erotic-Memoir-of-Spiritual-Awakening-by-Phyllis-Curott.pdf
    • http://loaminoo.linkpc.net/2095098091094098/You-Can-t-Plan-Love-Southern-Love-1-by-Synithia-Williams.pdf
    • http://loaminoo.linkpc.net/4096099095099094/The-Crimson-Spell-Volume-2-Crimson-Spell-2-by-Ayano-Yamane.pdf
    • http://loaminoo.linkpc.net/2090093096098090/The-Crimson-Spell-Volume-1-Crimson-Spell-1-by-Ayano-Yamane.pdf
    • http://loaminoo.linkpc.net/3098092094093097/Love-Ish-by-Karen-Rivers.pdf
    • http://loaminoo.linkpc.net/4096096099098093/The-Pitch-City-Love-2-by-Belinda-Williams.pdf
    • http://loaminoo.linkpc.net/5099095090096094/Dracula-in-Love-by-Karen-Essex.pdf
    • http://loaminoo.linkpc.net/1092092090092099/Dracula-in-Love-by-Karen-Essex.pdf
    • http://loaminoo.linkpc.net/4090099091094/Even-Now-Lost-Love-1-by-Karen-Kingsbury.pdf
    • http://loaminoo.linkpc.net/3098093094099095/A-Promise-of-Love-by-Karen-Ranney.pdf
    • http://loaminoo.linkpc.net/2091093092096097/A-Scotsman-in-Love-by-Karen-Ranney.pdf
    • http://loaminoo.linkpc.net/1097092094090090/The-Secret-Spanish-Love-Child-by-Cathy-Williams.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.