Malicious PDF — malware analysis report

Static analysis result for SHA-256 a9431227fb239095…

MALICIOUS

PDF

14.7 KB Created: 2019-05-04 14:07:38 +01:00 Authoring application: mPDF 5.7
MD5: 58736aa2eabe90232a6d34ba50400d0c SHA-1: cc16c189d623418976da1244c70dfe7353963852 SHA-256: a9431227fb2390952fdcd961a4c8d3965def6826d2048a4289f8d89dd9218c07
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1204.002 Malicious Link

The PDF file contains a large number of embedded links pointing to external PDF documents. The heuristic PDF_SEO_LINK_FARM indicates this is a link farm, likely intended to drive traffic or host malicious content indirectly. While the specific URLs are marked as benign, the sheer volume and the use of a dynamic DNS hostname suggest a malicious intent to obscure the true nature of the links. No scripts were extracted from this sample.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://xiixmcuin.linkpc.net/8205204207205209/Excellence-by-T-H-Bell.pdf
    • http://xiixmcuin.linkpc.net/8205204207201209/Marks-of-Excellence-Enemies-of-Excellence-by-Ed-Lapiz.pdf
    • http://xiixmcuin.linkpc.net/7201208209209207/Standard-of-Excellence-Book-1-Comprehensive-Band-Method-Book-1-Trombone-Bass-Clef-Standard-of-Excellence-Series-by-Bruce-Pearson.pdf
    • http://xiixmcuin.linkpc.net/1205206208207/Bell-Alexander-Graham-Bell-and-the-Conquest-of-Solitude-by-Robert-V-Bruce.pdf
    • http://xiixmcuin.linkpc.net/1201206205202202207/H-llenjagd-Ein-Isaac-Bell-Roman-Reihenfolge-der-Isaac-Bell-Abenteuer-1-by-Clive-Cussler.pdf
    • http://xiixmcuin.linkpc.net/8209203204204/Witch-s-Bell-6-Witch-s-Bell-6-by-Odette-C-Bell.pdf
    • http://xiixmcuin.linkpc.net/5207200200208204/Darius-Bell-and-the-Crystal-Bees-Darius-Bell-2-by-Odo-Hirsch.pdf
    • http://xiixmcuin.linkpc.net/2204202202204203/Zatch-Bell-Volume-1-Zatch-Bell-1-by-Makoto-Raiku.pdf
    • http://xiixmcuin.linkpc.net/1201207201202200203/The-Excellence-of-the-Rosary-by-M-J-Frings.pdf
    • http://xiixmcuin.linkpc.net/7202203206206200/Harvesting-Excellence-by-Alain-Ducasse.pdf
    • http://xiixmcuin.linkpc.net/8205204208201206/Advertising-Excellence-by-Courtland-L-Bov-e.pdf
    • http://xiixmcuin.linkpc.net/8205204208208205/Unleashing-Excellence-by-Dennis-Snow.pdf
    • http://xiixmcuin.linkpc.net/8205204208209209/The-Ethics-of-Excellence-by-Price-Pritchett.pdf
    • http://xiixmcuin.linkpc.net/5206202203203208/Excellence---your-key-to-elevation-by-Sunday-Adelaja.pdf
    • http://xiixmcuin.linkpc.net/8205204208209200/On-Excellence-in-Teaching-by-Robert-J-Marzano.pdf
    • http://xiixmcuin.linkpc.net/3205209202207200/Think-Big-Unleashing-Your-Potential-for-Excellence-by-Ben-Carson.pdf
    • http://xiixmcuin.linkpc.net/8205204208208209/True-Success-A-New-Philosophy-of-Excellence-by-Tom-Morris.pdf
    • http://xiixmcuin.linkpc.net/8205204207205203/Coaching-Evoking-Excellence-in-Others-by-James-Flaherty.pdf
    • http://xiixmcuin.linkpc.net/8205204208209201/The-Inner-Compass-for-Ethics-amp-Excellence-by-Naomi-Wolf.pdf
    • http://xiixmcuin.linkpc.net/8205204208208202/Pursuit-of-Excellence-by-The-Church-of-Jesus-Christ-of-Latter-day-Saints.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.