Malicious PDF — malware analysis report

Static analysis result for SHA-256 a6743b222b010a0f…

MALICIOUS

PDF

14.2 KB Created: 2019-05-03 05:49:41 +01:00 Authoring application: mPDF 5.7
MD5: 88179abbe69496d10c74c65509a6a1c5 SHA-1: eb9d5226d7249b98db7d1389a34f1296b10da160 SHA-256: a6743b222b010a0f96a5a7fb470eb3d16d353e7d6cf1211ac5daf676626b27de
60 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell

The PDF file contains a large number of embedded links pointing to external PDF documents. The heuristic 'PDF_SEO_LINK_FARM' indicates this is a link farm, likely intended to drive traffic or SEO for the 'loaminoo.linkpc.net' domain. While no scripts were extracted, the structure suggests a deceptive practice to redirect users to potentially malicious or unwanted content. The primary IOC is the dominant host 'loaminoo.linkpc.net'.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/6097094092097092/Black-Satin-Loveswept-675-by-Donna-Kauffman.pdf
    • http://loaminoo.linkpc.net/3099096093095098/Your-Wish-Is-My-Command-by-Donna-Kauffman.pdf
    • http://loaminoo.linkpc.net/3094092099098091/Unwrapped-Hot-Scot-Trilogy-2-5-by-Donna-Kauffman.pdf
    • http://loaminoo.linkpc.net/2091096094093091/Babycakes-Cupcake-Club-3-by-Donna-Kauffman.pdf
    • http://loaminoo.linkpc.net/3097093099098096/Kissing-Santa-Claus-Men-of-Hawaii-3-by-Donna-Kauffman.pdf
    • http://loaminoo.linkpc.net/4096099099093099/Snowflake-Bay-Brides-Of-Blueberry-Cove-2-by-Donna-Kauffman.pdf
    • http://loaminoo.linkpc.net/2091092098092098/The-Cinderella-Rules-Glass-Slipper-Inc-1-by-Donna-Kauffman.pdf
    • http://loaminoo.linkpc.net/3096095092092099/Dear-Prince-Charming-Glass-Slipper-Inc-2-by-Donna-Kauffman.pdf
    • http://loaminoo.linkpc.net/4096096095098094/Sea-Glass-Sunrise-The-Brides-of-Blueberry-Cove-1-by-Donna-Kauffman.pdf
    • http://loaminoo.linkpc.net/4097096095092094/Half-Moon-Harbor-Bachelors-of-Blueberry-Cove-2-by-Donna-Kauffman.pdf
    • http://loaminoo.linkpc.net/2094092093095095/Black-Satin-Pretty-in-Black-2-by-Rae-Hachton.pdf
    • http://loaminoo.linkpc.net/1099099093090096/Black-Satin-Pretty-in-Black-2-by-Rae-Hachton.pdf
    • http://loaminoo.linkpc.net/6097094092090096/Black-Satin-by-Joan-Elizabeth-Lloyd.pdf
    • http://loaminoo.linkpc.net/6097094092097090/Black-Satin-by-The-Black.pdf
    • http://loaminoo.linkpc.net/1090098095094090/Lean-On-Me-Loveswept-912-by-Jill-Shalvis.pdf
    • http://loaminoo.linkpc.net/1091099090091096095/Once-Upon-a-Time-Through-the-Looking-Glass-Loveswept-No-408-by-Kay-Hooper.pdf
    • http://loaminoo.linkpc.net/8099091095096092/Scout-s-Honor-Loveswept-198-by-Glenna-McReynolds.pdf
    • http://loaminoo.linkpc.net/4095090098095098/To-Give-a-Heart-Wings-Loveswept-No-506-by-Mary-Kay-McComas.pdf
    • http://loaminoo.linkpc.net/1096096096096/The-Perfectionist-by-Lane-Kauffman.pdf
    • http://loaminoo.linkpc.net/1094090098093099/Another-Place-You-ve-Never-Been-by-Rebecca-Kauffman.pdf
    • http://loaminoo.linkpc.net/1099099093090096/Black-Satin-Pretty-in-Black-2-by-Rae-Ha

Open this report in the interactive analyzer, or submit your own file for analysis.