Malicious PDF — malware analysis report

Static analysis result for SHA-256 967edf1c0065f9d1…

MALICIOUS

PDF

15.8 KB Created: 2019-05-04 12:43:05 +01:00 Authoring application: mPDF 5.7
MD5: 4c6b192bfa578d762fff6457c29a7d8d SHA-1: 7890f3f4bfd599c2fa4fcbf197027b025305783c SHA-256: 967edf1c0065f9d135ce84b3ed63044916329ebb1cf3bbd5cfb5e4815547587f
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF document contains a large number of embedded URLs, identified as a 'PDF_SEO_LINK_FARM' heuristic. These URLs point to various book titles, suggesting a tactic to manipulate search engine results or to serve as a lure for users to click through to potentially malicious content. While the URLs themselves are currently marked as benign, the sheer volume and the nature of the heuristic indicate a malicious intent, likely for SEO poisoning or as a distribution vector for further compromise. No scripts were extracted from this sample.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/3091090090094097/The-Garden-of-Death-The-Eden-Chronicles-2-by-L-L-Hunter.pdf
    • http://loaminoo.linkpc.net/1091090093091097/The-Garden-of-Eden-The-Eden-Chronicles-1-by-L-L-Hunter.pdf
    • http://loaminoo.linkpc.net/4097095098099099/The-Garden-of-Fate-The-Eden-Chronicles-3-by-L-L-Hunter.pdf
    • http://loaminoo.linkpc.net/1095095090099097/The-Given-Garden-Eden-Chronicles-1-by-S-K-Munt.pdf
    • http://loaminoo.linkpc.net/2090096090098090/Eden-s-Garden-by-Xondra-Day.pdf
    • http://loaminoo.linkpc.net/1096099097094094/The-Dark-Garden-by-Eden-Bradley.pdf
    • http://loaminoo.linkpc.net/4097099094097096/Garden-of-Eden-by-Selena-Kitt.pdf
    • http://loaminoo.linkpc.net/1095095098090095/Just-a-Pilgrim-Garden-of-Eden-by-Garth-Ennis.pdf
    • http://loaminoo.linkpc.net/7096092097093099/History-of-Paradise-The-Garden-of-Eden-in-Myth-and-Tradition-by-Jean-Delumeau.pdf
    • http://loaminoo.linkpc.net/1095092093098097/Garden-of-Eden-Biblical-Legends-Anthology-Series-1-by-Allen-Taylor.pdf
    • http://loaminoo.linkpc.net/4093094097091092/Chasing-Tyranny-One-Small-Step-out-of-the-Garden-of-Eden-2-by-Robert-Wagoner.pdf
    • http://loaminoo.linkpc.net/2095093095094097/Get-Me-Out-A-History-of-Childbirth-from-the-Garden-of-Eden-to-the-Sperm-Bank-by-Randi-Hutter-Epstein.pdf
    • http://loaminoo.linkpc.net/2097098098093090/Forged-in-Death-The-Death-Wizard-Chronicles-1-by-Jim-Melvin.pdf
    • http://loaminoo.linkpc.net/3092099096091094/Camille-s-Capture-New-Eden-Chronicles-3-by-Evanne-Lorraine.pdf
    • http://loaminoo.linkpc.net/1098097099097096/In-a-Desert-Garden-Love-and-Death-among-the-Insects-by-John-Alcock.pdf
    • http://loaminoo.linkpc.net/5095095092093093/Chronicles-of-the-South-Garden-of-the-Beaux-Arts-by-Thomas-Fleming.pdf
    • http://loaminoo.linkpc.net/1096095092091097/The-Reaper-s-Garden-Death-and-Power-in-the-World-of-Atlantic-Slavery-by-Vincent-Brown.pdf
    • http://loaminoo.linkpc.net/2094098096093092/I-Am-Death-Robert-Hunter-7-by-Chris-Carter.pdf
    • http://loaminoo.linkpc.net/1091095093098090090/A-Death-in-the-Flower-Garden-Danger-Cove-Farmers-Market-Mystery-1-by-Elizabeth-Ashby.pdf
    • http://loaminoo.linkpc.net/4090091092099095/The-Hunter-s-Moon-The-Chronicles-of-Faerie-1-by-O-R-Melling.pdf
    • http://loaminoo.linkpc.net/2095093095094097/Get-Me-Out-A-History-of-Childbirth-from-the-Garden-of-Eden-to-the-Spe

Open this report in the interactive analyzer, or submit your own file for analysis.