Malicious PDF — malware analysis report

Static analysis result for SHA-256 8954257cdc31d368…

MALICIOUS

PDF

26.8 KB Created: 2020-03-19 20:23:25 +00:00 Authoring application: mPDF 5.7
MD5: 4eda5f38ecd5a03ca49387ad551240d6 SHA-1: bd30fa96714579b31f295efe54e617a460990f49 SHA-256: 8954257cdc31d3689e6d8c4b32be48e88f45b9dc1990e5b362a810a6e75dc9b4
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF file contains a large number of embedded URLs, constituting a link farm. The primary heuristic indicates a 'PDF_SEO_LINK_FARM' with 30 numeric slug SEO PDF links, all pointing to the domain 'owlaokopdf.myhome.cx'. This suggests the document's purpose is to redirect users to a large collection of external PDF files, likely for SEO manipulation or to distribute potentially malicious content disguised as legitimate documents.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://owlaokopdf.myhome.cx/881668166816481678164/Gerd-Arntz-Graphic-Designer-by-Max-Bruinsma.pdf
    • http://owlaokopdf.myhome.cx/681678165816281648161/How-to-Succeed-as-a-Graphic-Designer---Revised-Second-Edition-by-Mario-Godbout.pdf
    • http://owlaokopdf.myhome.cx/1816181638165816781608168/Edvard-Munch-The-Complete-Graphic-Works-by-Gerd-Woll.pdf
    • http://owlaokopdf.myhome.cx/881628168816481648161/The-Affinity-Designer-Instant-Professional-For-Everything-from-Illustrations-to-Image-Processing-This-Japanese-Language-Guide-to-the-Powerful-Graphic-Design-Software-Is-All-You-Need-Be-a-Pro-Right-Now-by-Akira-Kuwahara.pdf
    • http://owlaokopdf.myhome.cx/881628168816481678165/The-Affinity-Designer-Instant-Professional-for-Windows-For-Everything-from-Illustrations-to-Image-Processing-This-Windows-Version-Japanese-Language-Guide-to-the-Powerful-Graphic-Design-Software-Is-All-You-Need-by-Akira-Kuwahara.pdf
    • http://owlaokopdf.myhome.cx/1816081688161816981638165/Bleep-An-der-Schnittstelle-von-Spiritualit-t-und-Wissenschaft-by-William-Arntz.pdf
    • http://owlaokopdf.myhome.cx/981668161816281618164/Gerd-Rothmann-Catalogue-Raisonn-by-Gerd-Rothmann.pdf
    • http://owlaokopdf.myhome.cx/381678169816581698169/Eagle-Strike-The-Graphic-Novel-Alex-Rider-The-Graphic-Novels-4-by-Antony-Johnston.pdf
    • http://owlaokopdf.myhome.cx/281688161816781668169/The-Opal-Deception-The-Graphic-Novel-Artemis-Fowl-The-Graphic-Novels-4-by-Eoin-Colfer.pdf
    • http://owlaokopdf.myhome.cx/181668162816581638168/Attack-of-the-Cling-Ons-Star-Bus-Graphic-Sparks-Graphic-Novels-by-Troy-Denning.pdf
    • http://owlaokopdf.myhome.cx/78167816481618163/Point-Blanc-The-Graphic-Novel-Alex-Rider-The-Graphic-Novels-2-by-Antony-Johnston.pdf
    • http://owlaokopdf.myhome.cx/181648167816881648163/Shadow-Kiss-The-Graphic-Novel-Vampire-Academy-The-Graphic-Novel-3-by-Richelle-Mead.pdf
    • http://owlaokopdf.myhome.cx/181608160816581618160/What-the-Bleep-Do-We-Know-Discovering-the-Endless-Possibilities-for-Altering-Your-Everyday-Reality-by-William-Arntz.pdf
    • http://owlaokopdf.myhome.cx/281678165816981658168/The-Everything-Guide-to-Writing-Graphic-Novels-From-superheroes-to-manga-all-you-need-to-start-creating-your-own-graphic-works-by-Mark-Ellis.pdf
    • http://owlaokopdf.myhome.cx/481668162816681638166/Exile-The-Graphic-Novel-Legend-of-Drizzt-The-Graphic-Novel-2-by-R-A-Salvatore.pdf
    • http://owlaokopdf.myhome.cx/3816781618160/New-Moon-The-Graphic-Novel-Vol-2-Twilight-The-Graphic-Novel-4-by-Young-Kim.pdf
    • http://owlaokopdf.myhome.cx/281608168816981648162/Prodigy-The-Graphic-Novel-Legend-The-Graphic-Novel-2-by-Marie-Lu.pdf
    • http://owlaokopdf.myhome.cx/281698168816481628161/The-Graphic-Canon-of-Children-s-Literature-The-World-s-Great-Kids-Lit-as-Comics-and-Visuals-The-Graphic-Canon-by-Russ-Kick.pdf
    • http://owlaokopdf.myhome.cx/781618162816081658161/The-Graphic-Canon-Vol-3-From-Heart-of-Darkness-to-Hemingway-to-Infinite-Jest-The-Graphic-Canon-3-by-Russ-Kick.pdf
    • http://owlaokopdf.myhome.cx/481668162816581678162/The-Designer-by-Marius-Gabriel.pdf
    • http://owlaokopdf.myhome.cx/881628168816481678165/The-Affinity-Designer-Instant-Professional-for-Windows-For-Everything-from-Illustrations-to-Image-Proce

Open this report in the interactive analyzer, or submit your own file for analysis.