Malicious PDF — malware analysis report

Static analysis result for SHA-256 989799b5264ebbd6…

MALICIOUS

PDF

14.9 KB Created: 2019-05-02 07:30:11 +01:00 Authoring application: mPDF 5.7
MD5: 53de1456fbcf382b50cdcd693f36c776 SHA-1: adc9466e89ff3fb5ce4af55d66289c95ed8bb090 SHA-256: 989799b5264ebbd6479b8a887be1e315dedbaa82f1ab57935e0d7ec7f8261f1f
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF file contains a large number of embedded links, identified by the PDF_SEO_LINK_FARM heuristic. While the document body is unreadable, the presence of numerous external links suggests a tactic to manipulate search engine results or to distribute malicious content. The primary attack pattern involves directing users to external resources via these links.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/6092096092091092/Catting-Around-Kontra-s-Menagerie-16-by-Charlie-Richards.pdf
    • http://loaminoo.linkpc.net/4097090090091098/Catlin-s-Appaloosa-Kontra-s-Menagerie-2-by-Charlie-Richards.pdf
    • http://loaminoo.linkpc.net/6092096092092093/Silver-Tipped-Justice-Kontra-s-Menagerie-8-by-Charlie-Richards.pdf
    • http://loaminoo.linkpc.net/6092096092092096/Ruffling-the-Peacock-s-Feathers-Kontra-s-Menagerie-12-by-Charlie-Richards.pdf
    • http://loaminoo.linkpc.net/2097098093090092/Piggyback-Carry-Me-2-by-Charlie-Richards.pdf
    • http://loaminoo.linkpc.net/1090096091098097094/An-Unforgettable-Bite-A-Loving-Nip-3-by-Charlie-Richards.pdf
    • http://loaminoo.linkpc.net/3097098093092097/For-A-Dragon-s-Touch-Highland-Dragons-1-by-Charlie-Richards.pdf
    • http://loaminoo.linkpc.net/8091091093094090/Hacking-the-Consequences-Shifter-s-Regime-1-by-Charlie-Richards.pdf
    • http://loaminoo.linkpc.net/5092098095093099/A-Pair-for-Serena-Gargoyles-of-Cuchulian-5-by-Charlie-Richards.pdf
    • http://loaminoo.linkpc.net/4096099099099090/Trill-To-Me-Sweetly-A-Paranormal-s-Love-1-by-Charlie-Richards.pdf
    • http://loaminoo.linkpc.net/4096099098090097/Werewolf-at-the-Zoo-Wolves-of-Stone-Ridge-1-by-Charlie-Richards.pdf
    • http://loaminoo.linkpc.net/4098093097091097/Snowballs-amp-Candy-Canes-Carry-Me-6-by-Charlie-Richards.pdf
    • http://loaminoo.linkpc.net/4097090090092098/Alpha-s-Prerogative-Wolves-of-Stone-Ridge-2-by-Charlie-Richards.pdf
    • http://loaminoo.linkpc.net/4097090090092097/Accepting-His-Animal-Wolves-of-Stone-Ridge-3-by-Charlie-Richards.pdf
    • http://loaminoo.linkpc.net/4097090090092096/Accepting-His-Human-Wolves-of-Stone-Ridge-4-by-Charlie-Richards.pdf
    • http://loaminoo.linkpc.net/3091095098095099/Goading-the-Enforcer-Wolves-of-Stone-Ridge-6-by-Charlie-Richards.pdf
    • http://loaminoo.linkpc.net/4097090090093093/Loving-the-Enemy-Wolves-of-Stone-Ridge-8-by-Charlie-Richards.pdf
    • http://loaminoo.linkpc.net/4097090090091097/A-Cajun-in-Colorado-Wolves-of-Stone-Ridge-12-by-Charlie-Richards.pdf
    • http://loaminoo.linkpc.net/3097096096091095/Alpha-s-Prerogative-Wolves-of-Stone-Ridge-2-by-Charlie-Richards.pdf
    • http://loaminoo.linkpc.net/3097096099090090/Loving-the-Enemy-Wolves-of-Stone-Ridge-8-by-Charlie-Richards.pdf
    • http://loaminoo.linkpc.net/4096099099099090/Trill-To-Me-Sweetly-A-Paranormal-s-Love-1-by-Ch

Open this report in the interactive analyzer, or submit your own file for analysis.