Malicious PDF — malware analysis report

Static analysis result for SHA-256 910745a4becc7f2b…

MALICIOUS

PDF

16.4 KB Created: 2019-05-04 14:07:39 +01:00 Authoring application: mPDF 5.7
MD5: 73d7bf6e87839631993295e35e579712 SHA-1: eebd92801133ccd65c07fe9b5731efea016a5fdf SHA-256: 910745a4becc7f2b7ad4df16a7a10d37828c2409e10629c3ea4b02f552d16dd0
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF file contains a large number of embedded URLs, forming a link farm. The primary heuristic indicates this is a critical finding, suggesting the PDF is designed to redirect users to external content, likely for SEO manipulation or to host malicious links. While the specific intent beyond link farming is unclear, the sheer volume and nature of the links point to a deceptive or malicious purpose.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/1091093099097096093/Mijn-status-is-positief-een-dagboek-in-zwart-wit-by-Annemie-Struyf.pdf
    • http://loaminoo.linkpc.net/3091098095098091/Mijn-man-en-mijn-minnaars-by-Robin-Rinaldi.pdf
    • http://loaminoo.linkpc.net/2099097096096099/Dagboek-van-een-Manny-by-Holly-Peterson.pdf
    • http://loaminoo.linkpc.net/4090096093096/The-Dolls-Party-by-Annemie-Heymans.pdf
    • http://loaminoo.linkpc.net/2094098091095091/Nacht-in-Parijs-Chantal-Zwart-4-by-Michael-Berg.pdf
    • http://loaminoo.linkpc.net/1091093099097096099/The-Mental-Status-Examination-in-Neurology-the-Mental-Status-Examination-in-Neurology-the-Mental-Status-Examination-in-Neurology-by-Richard-L-Strub.pdf
    • http://loaminoo.linkpc.net/1090091090090092091/Met-mijn-vader-in-bed-by-Magne-van-den-Berg.pdf
    • http://loaminoo.linkpc.net/1091090094096097097/Val-in-mijn-armen-by-Elizabeth-Hoyt.pdf
    • http://loaminoo.linkpc.net/8096091090092099/Flut-Mijn-Boek-in-de-Put-by-Eva-De-Wilde.pdf
    • http://loaminoo.linkpc.net/1090091099095099099/Mijn-leven-in-schande-by-Austin-Clarke.pdf
    • http://loaminoo.linkpc.net/8097091092091098/Nog-even-mijn-haartjes-wassen-by-J-rg-M-hle.pdf
    • http://loaminoo.linkpc.net/1091097094098091090/Je-staat-in-mijn-sterren-by-Claudia-Carroll.pdf
    • http://loaminoo.linkpc.net/5090093094090093/Mijn-vader-woont-in-Brazili-by-Thea-Beckman.pdf
    • http://loaminoo.linkpc.net/1091091093096099092/Mijn-keuken-in-Berlijn-Het-echte-leven-van-The-Wednesday-Chef-by-Luisa-Weiss.pdf
    • http://loaminoo.linkpc.net/1091091090093091095/Begraaf-mijn-hart-bij-de-bocht-van-de-rivier-de-ondergang-van-de-Indianen-in-Noord-Amerika-by-Dee-Brown.pdf
    • http://loaminoo.linkpc.net/9096092096099093/Hans-Fallada-Alles-in-mijn-leven-komt-terecht-in-een-boek-by-Anne-Folkertsma.pdf
    • http://loaminoo.linkpc.net/1090095090097098090/Abw-rts-from-the-movie-quot-Abw-rts-quot-Single-Songbook-by-Jacques-Zwart.pdf
    • http://loaminoo.linkpc.net/1091093099096097097/Gifts-The-Status-Quo-1-by-R-Phoenix.pdf
    • http://loaminoo.linkpc.net/1091093099095090095/Status-Quo-by-Henry-Mosquera.pdf
    • http://loaminoo.linkpc.net/1091093099095097093/Status-Quo-by-Drew-Wagar.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.