Malicious PDF — malware analysis report

Static analysis result for SHA-256 a12f8c27da32acbc…

MALICIOUS

PDF

17.5 KB Created: 2019-04-30 02:38:16 +01:00 Authoring application: mPDF 5.7
MD5: 880f1adf07d8a232103e244e42b25450 SHA-1: 4fce383f93029701ea002e9e4c164c7e19ec6929 SHA-256: a12f8c27da32acbc104839e3943df6c482be3208ac82327f4946c2c936180162
60 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell

The PDF contains a large number of embedded URLs pointing to external PDF files, many of which are book titles related to cancer or other sensitive topics. This suggests a link farm or SEO poisoning attempt. The heuristic 'PDF_SEO_LINK_FARM' confirms the presence of a mass external PDF link farm. No scripts were extracted from this sample.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/3090092093099/Cancer---It-s-a-Good-Thing-I-Got-It-The-Life-Story-of-a-Very-Lucky-Man-by-David-A-Koop.pdf
    • http://loaminoo.linkpc.net/3093098090094094/I-Am-Cancer-Free-The-Author-s-True-Story-about-Her-Bout-with-Cancer-by-Brenda-Mohammed.pdf
    • http://loaminoo.linkpc.net/1091094097093097098/Recovery-from-Cancer-The-Remarkable-Story-of-One-Woman-s-Struggle-with-Cancer-by-Elaine-Nussbaum.pdf
    • http://loaminoo.linkpc.net/1096098093098094/There-s-No-Such-Thing-as-Free-Speech-And-It-s-a-Good-Thing-Too-by-Stanley-Fish.pdf
    • http://loaminoo.linkpc.net/3093091094096095/Good-Thing-Bad-Thing-50-Reasons-3-by-Nick-Alexander.pdf
    • http://loaminoo.linkpc.net/2093091092095097/The-Thing-About-Life-is-That-One-Day-You-ll-Be-Dead-by-David-Shields.pdf
    • http://loaminoo.linkpc.net/2094099094097096/The-Sweetest-Thing-Lucky-Harbor-2-by-Jill-Shalvis.pdf
    • http://loaminoo.linkpc.net/9098092091096/It-s-Not-A-Hard-Habit-To-Break-How-To-Develop-Good-Habits-For-Success-In-All-Areas-Of-Your-Life-by-David-Schmall.pdf
    • http://loaminoo.linkpc.net/3090098099091099/The-Good-Book-of-Nutrition-A-Guide-to-Healthful-Eating-by-American-Cancer-Society.pdf
    • http://loaminoo.linkpc.net/3094090098093094/A-Good-Thing-2-If-I-Be-Lifted-Up-by-She-Nell.pdf
    • http://loaminoo.linkpc.net/3095099099098092/A-Very-Good-Thing-Dead-End-3-by-P-S-Power.pdf
    • http://loaminoo.linkpc.net/2093095095092096/Every-Good-Thing-by-M-Jules-Aedin.pdf
    • http://loaminoo.linkpc.net/3098092094095095/One-Good-Thing-about-America-by-Ruth-Freeman.pdf
    • http://loaminoo.linkpc.net/2093096096/Too-Much-of-a-Good-Thing-How-Four-Key-Survival-Traits-Are-Now-Killing-Us-by-Lee-Goldman.pdf
    • http://loaminoo.linkpc.net/3097094091099099/Mr-Strong-Good-Thing-I-Came-Along-by-Michael-Daedalus-Kenny.pdf
    • http://loaminoo.linkpc.net/2091092095093099/The-Great-Good-Thing-The-Sylvie-Cycle-1-by-Roderick-Townley.pdf
    • http://loaminoo.linkpc.net/3091096093099090/Champ-s-Story-Dogs-Get-Cancer-Too-by-Sherry-North.pdf
    • http://loaminoo.linkpc.net/4090096097090095/The-Man-Who-Couldn-t-Stop-OCD-and-the-True-Story-of-a-Life-Lost-in-Thought-by-David-Adam.pdf
    • http://loaminoo.linkpc.net/1090097092093098094/The-Good-Life-and-the-Greater-Good-in-a-Global-Context-by-Laura-Savu-Walker.pdf
    • http://loaminoo.linkpc.net/1093090093092095/Picasso-s-Woman-A-Breast-Cancer-Story-by-Rosalind-MacPhee.pdf
    • http://loaminoo.linkpc.net/9098092091096/It-s-Not-A-Hard-Habit-To-Break-How-To-Develop-Good-Habits-For-Success-In-All-Area

Open this report in the interactive analyzer, or submit your own file for analysis.