Malicious PDF — malware analysis report

Static analysis result for SHA-256 a4aa883da34f1fba…

MALICIOUS

PDF

15.8 KB Created: 2019-11-07 10:10:19 +00:00 Authoring application: mPDF 5.7
MD5: 618e973e08e5c2b542fe3afeb886e78f SHA-1: ee087f4aaa8ffb1365df5e9cdd352dacc9385b9d SHA-256: a4aa883da34f1fbab3656c10e671578d91148adcb952adbe375bb82c5fdea7ce
60 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell

The PDF file contains a large number of embedded URLs, identified by the PDF_SEO_LINK_FARM heuristic. These URLs point to various book titles, suggesting a potential SEO poisoning or content distribution scheme. While the URLs themselves are marked as benign, the sheer volume and structure indicate a malicious intent to manipulate search results or distribute content. No scripts were extracted from this sample.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/2738730736730733/Pride-Unleashed-A-Wolf-s-Pride-2-by-Cat-Kalen.pdf
    • http://cefasfese.4pu.com/3736731733733732/Pride-Series-Book-Three-amp-Four-The-Pride-3-4-by-Jill-Sanders.pdf
    • http://cefasfese.4pu.com/3731737732736732/Wild-Pride-The-Kingson-Pride-1-by-Kristen-Banet.pdf
    • http://cefasfese.4pu.com/3736731733734736/Pride-Series-Book-One-amp-Two-The-Pride-1-2-by-Jill-Sanders.pdf
    • http://cefasfese.4pu.com/2734731732733735/Returning-Pride-The-Pride-3-by-Jill-Sanders.pdf
    • http://cefasfese.4pu.com/1731734738738739733/Pride-Finden-Pride-1-by-Jill-Sanders.pdf
    • http://cefasfese.4pu.com/2737733736735734/The-Pride-2-The-Pride-2-by-Joseph-Glass.pdf
    • http://cefasfese.4pu.com/2737738734733730/A-Wolf-s-Pride-Love-Bites-3-by-Jennifer-T-Alli.pdf
    • http://cefasfese.4pu.com/3739730730738733/Mr-Darcy-s-Pride-and-Joy-A-Pride-and-Prejudice-Variation-The-Darcy-Novels-3-by-Monica-Fairview.pdf
    • http://cefasfese.4pu.com/2738732733739737/Pride-and-Prejudice-and-Poison-A-Pride-and-Prejudice-Novel-Variation-by-Bella-Breen.pdf
    • http://cefasfese.4pu.com/2737733734731731/The-Pride-Adventures-Vol-1-The-Pride-Adventures-1-by-Joseph-Glass.pdf
    • http://cefasfese.4pu.com/2738732734732733/Pride-amp-Prejudice-amp-Assassinations-Pride-amp-Prejudice-amp-Assassinations-Book-1-by-Leo-Charles-Taylor.pdf
    • http://cefasfese.4pu.com/3734731737733734/Pride-and-Joy-by-M-L-Rice.pdf
    • http://cefasfese.4pu.com/2733734731735731/What-s-in-a-Name-Foothills-Pride-1-by-Pat-Henshaw.pdf
    • http://cefasfese.4pu.com/1731738734733736733/Koi-to-Uso-to-Pride-to-by-Kisaragi-Seika.pdf
    • http://cefasfese.4pu.com/3734735737738732/Pride-by-Lorene-Cary.pdf
    • http://cefasfese.4pu.com/1731739736738732735/Pride-of-the-Decent-Man-by-T-J-Kirsch.pdf
    • http://cefasfese.4pu.com/4739738737735735/Take-My-Pride-by-Kiyoshi-Tanaka.pdf
    • http://cefasfese.4pu.com/4732735733736732/Pride-by-Candace-Blevins.pdf
    • http://cefasfese.4pu.com/1736737735735739/Our-Pride-and-Our-Joy-by-Richard-Nurse.pdf
    • http://cefasfese.4pu.com/2738732734732733/Pride-amp-Prejudice-amp-Assassinations-Pride-amp

Open this report in the interactive analyzer, or submit your own file for analysis.