Malicious PDF — malware analysis report

Static analysis result for SHA-256 9f30e533d3ad6a63…

MALICIOUS

PDF

15.5 KB Created: 2019-05-02 03:11:16 +01:00 Authoring application: mPDF 5.7
MD5: 492d1f53425d1f90d979f05ba4b44499 SHA-1: 5be2a2846f2a3f4a1ce78326901e7a451761badf SHA-256: 9f30e533d3ad6a63dd4a92ca7284aea431bcdf84747477d68d7b806f44bd7220
60 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell

The PDF contains a large number of embedded links pointing to external PDF files, a technique often used for SEO manipulation or to distribute malicious content. The heuristic 'PDF_SEO_LINK_FARM' indicates a mass external link farm. While the extracted URLs are currently marked as benign, the sheer volume and the nature of the heuristic suggest a malicious intent, likely to drive traffic or host further malicious content. No scripts were extracted from this sample.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/7098094097097098/Rip-It-Up-by-Richard-Wiseman.pdf
    • http://loaminoo.linkpc.net/8099090097092090/Wie-Sie-in-60-Sekunden-Ihr-Leben-ver-ndern-by-Richard-Wiseman.pdf
    • http://loaminoo.linkpc.net/6099092098096099/59-secondes-pour-prendre-les-bonnes-d-cisions-by-Richard-Wiseman.pdf
    • http://loaminoo.linkpc.net/3097098094090096/The-As-If-Principle-The-Radically-New-Approach-to-Changing-Your-Life-by-Richard-Wiseman.pdf
    • http://loaminoo.linkpc.net/6096095094095091/A-Night-Out-Night-School-Revue-Sketches-Early-Plays-by-Harold-Pinter.pdf
    • http://loaminoo.linkpc.net/4098097099096099/Legacy-Night-School-2-by-C-J-Daugherty.pdf
    • http://loaminoo.linkpc.net/2099092096096094/School-for-Scandal-by-Richard-Brinsley-Sheridan.pdf
    • http://loaminoo.linkpc.net/3090095099096094/Team-A-High-School-Odyssey-by-Richard-Woodley.pdf
    • http://loaminoo.linkpc.net/5096098094092/Getting-to-Maybe-How-to-Excel-on-Law-School-Exams-by-Richard-Michael-Fischl.pdf
    • http://loaminoo.linkpc.net/4090097092098099/Night-of-Pleasure-School-of-Gallantry-4-by-Delilah-Marvelle.pdf
    • http://loaminoo.linkpc.net/6099090099093098/The-School-for-Scandal-A-Comedy-in-Five-Acts-by-Richard-Brinsley-Sheridan.pdf
    • http://loaminoo.linkpc.net/1095099094094090/Night-School-Blood-Coven-Vampire-5-by-Mari-Mancusi.pdf
    • http://loaminoo.linkpc.net/4095091097098099/Secondary-School-Teaching-A-Guide-to-Methods-and-Resources-by-Richard-D-Kellough.pdf
    • http://loaminoo.linkpc.net/2096091094090096/The-Night-Book-by-Richard-Madeley.pdf
    • http://loaminoo.linkpc.net/1091097093095092/One-Rainy-Night-by-Richard-Laymon.pdf
    • http://loaminoo.linkpc.net/4093090099091/Endless-Night-by-Richard-Laymon.pdf
    • http://loaminoo.linkpc.net/1090091096096095092/Say-Good-Night-to-Insomnia-The-Six-Week-Drug-Free-Program-Developed-At-Harvard-Medical-School-by-Gregg-D-Jacobs.pdf
    • http://loaminoo.linkpc.net/2098092095090099/Escape-the-Night-by-Richard-North-Patterson.pdf
    • http://loaminoo.linkpc.net/8092095092098093/Manga-Shakespeare-Twelfth-Night-by-Richard-Appignanesi.pdf
    • http://loaminoo.linkpc.net/4096092099093097/American-Night-The-Ballad-of-Juan-Jos-by-Richard-Montoya.pdf
    • http://loaminoo.linkpc.net/6

Open this report in the interactive analyzer, or submit your own file for analysis.