Malicious PDF — malware analysis report

Static analysis result for SHA-256 90ce621733f3229f…

MALICIOUS

PDF

16.6 KB Created: 2020-02-05 20:59:41 +00:00 Authoring application: mPDF 5.7
MD5: 6f4364e0bd078c89e15982b80d8c6e69 SHA-1: 06c33b223173e4466bf36bb5a160f50ac410bcc1 SHA-256: 90ce621733f3229fc888a5a3fcf9a1ac12638cdc629eb7c406878248fa0221c1
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF file contains a large number of embedded URLs, identified as a link farm. The primary heuristic indicates a critical finding related to this link farm, suggesting a malicious intent to redirect users to external content. No scripts were extracted from this sample. The URLs point to a domain that appears to be used for hosting potentially malicious content.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://owlaokopdf.myhome.cx/381608168816181688162/Batman-The-Brave-and-the-Bold-by-Matt-Wayne.pdf
    • http://owlaokopdf.myhome.cx/381608168816081648169/The-All-New-Batman-The-Brave-and-the-Bold-Volume-1-by-Sholly-Fisch.pdf
    • http://owlaokopdf.myhome.cx/1816081658163816681628163/Showcase-Presents-The-Brave-and-the-Bold-The-Batman-Team-Ups-Vol-1-by-Bob-Haney.pdf
    • http://owlaokopdf.myhome.cx/381608168816081658165/Batman-Brave-and-the-Bold---Emerald-Knight-by-Sholly-Fisch.pdf
    • http://owlaokopdf.myhome.cx/881608169816781678163/The-Brave-and-the-Bold-1955-1983-144-by-Len-Wein.pdf
    • http://owlaokopdf.myhome.cx/881608169816681618169/The-Brave-and-the-Bold-1955-1983-155-by-Bob-Haney.pdf
    • http://owlaokopdf.myhome.cx/881608169816681638166/The-Brave-and-the-Bold-1955-1983-154-by-Bob-Haney.pdf
    • http://owlaokopdf.myhome.cx/881608169816681648161/The-Brave-and-the-Bold-1955-1983-142-by-Bob-Haney.pdf
    • http://owlaokopdf.myhome.cx/381608166816681628161/The-Brave-and-the-Bold-Vol-1-The-Lords-of-Luck-by-Mark-Waid.pdf
    • http://owlaokopdf.myhome.cx/181618166816381698163/Bold-Brave-and-Courageous-A-NO-FEAR-Success-Guide-for-Teen-Girls-by-Wyjuana-Montgomery.pdf
    • http://owlaokopdf.myhome.cx/381608167816881698169/Batman-Bruce-Wayne-Murderer-by-Greg-Rucka.pdf
    • http://owlaokopdf.myhome.cx/181608164816481668163/Batman-Superman-Wonder-Woman-Trinity-by-Matt-Wagner.pdf
    • http://owlaokopdf.myhome.cx/281648161816781678160/Junior-Braves-of-the-Apocalypse-Volume-1-A-Brave-is-Brave-1-by-Greg-Smith.pdf
    • http://owlaokopdf.myhome.cx/381658160816881638162/Brave-Land-Brave-Love-Australian-Trilogy-3-by-Connie-Mason.pdf
    • http://owlaokopdf.myhome.cx/481628165816181638160/John-Wayne-My-Life-With-the-Duke-by-Pilar-Wayne.pdf
    • http://owlaokopdf.myhome.cx/18160816581638169/Batman-amp-Robin-Batman-Reborn-by-Grant-Morrison.pdf
    • http://owlaokopdf.myhome.cx/481628163816381648163/Stop-the-Excuses-How-to-Change-Lifelong-Thoughts-Wayne-W-Dyer-by-Wayne-W-Dyer.pdf
    • http://owlaokopdf.myhome.cx/481688169816681688167/Brave-New-World-and-Brave-New-World-Revisited-by-Aldous-Huxley.pdf
    • http://owlaokopdf.myhome.cx/98168816981688163/Randy-Wayne-White-s-Ultimate-Tarpon-Book-The-Birth-of-Big-Game-Fishing-by-Randy-Wayne-White.pdf
    • http://owlaokopdf.myhome.cx/281638160816481648168/Wayne-by-Wayne-Theodore.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.