Malicious PDF — malware analysis report

Static analysis result for SHA-256 aa6b14ff915ccac2…

MALICIOUS

PDF

15.5 KB Created: 2019-05-02 17:25:11 +01:00 Authoring application: mPDF 5.7
MD5: 77e0220584bf055bf0ea77841faf0927 SHA-1: bac1de752314f7a870632f1d9bf3ed6aa8f3e34e SHA-256: aa6b14ff915ccac2e73ed0eb112e9b3e5dfadd8b840337ff667974245ae7c1be
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1204.002 Malicious Link

The PDF file contains a large number of embedded URLs, forming a link farm. The primary heuristic indicates this is a technique to artificially inflate search engine rankings or distribute malicious links. While the URLs themselves are currently marked as benign, the sheer volume and the heuristic firing suggest a malicious intent to redirect users to potentially harmful content. No scripts were extracted from this sample.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/2097098091098097/RNWMP-Bride-for-Elijah-Mail-Order-Mounties-2-by-Kay-P-Dawson.pdf
    • http://loaminoo.linkpc.net/6096090092091091/RNWMP-Bride-for-Joel-Mail-Order-Mounties-4-by-Amelia-C-Adams.pdf
    • http://loaminoo.linkpc.net/1090091093095096095/Mollie-Bride-of-Georgia-American-Mail-Order-Bride-4-by-Lorrie-Farrelly.pdf
    • http://loaminoo.linkpc.net/1094098096098096/The-Airman-s-E-mail-Order-Bride-by-Cora-Seton.pdf
    • http://loaminoo.linkpc.net/4099093092096091/The-Mail-Order-Bride-s-Deception-by-Ruth-Ann-Nordin.pdf
    • http://loaminoo.linkpc.net/9097091098096096/The-Airman-s-E-Mail-Order-Bride-by-Cora-Seton.pdf
    • http://loaminoo.linkpc.net/1091091098091099094/Stina-and-the-Decision-Mail-Order-Bride-3-by-D-D-Boone.pdf
    • http://loaminoo.linkpc.net/3098092098090097/The-Vampire-s-Mail-Order-Bride-Nocturne-Falls-1-by-Kristen-Painter.pdf
    • http://loaminoo.linkpc.net/5090090090099098/Mail-Order-Bride-Savannah-s-Cowboy-by-Crystal-Anne-Tilden.pdf
    • http://loaminoo.linkpc.net/4094096098099097/Buying-a-Bride-An-Engaging-History-of-Mail-Order-Matches-by-Marcia-A-Zug.pdf
    • http://loaminoo.linkpc.net/4092092092092096/Mail-Order-Rose-Mail-Order-Brides-1-by-Cara-Cabot.pdf
    • http://loaminoo.linkpc.net/2094096090096090/A-Mail-Order-Bride-for-Grant-The-Carson-Brothers-of-Kansas-4-by-Carr-White.pdf
    • http://loaminoo.linkpc.net/1097097094098098/The-Soldier-s-E-Mail-Order-Bride-The-Heroes-of-Chance-Creek-2-by-Cora-Seton.pdf
    • http://loaminoo.linkpc.net/9092097097099099/The-Farmer-s-Wealthy-Bride-Big-Bertha-s-Mail-Order-Brides-4-by-Faith-Johnson.pdf
    • http://loaminoo.linkpc.net/2097093098096098/A-Timeless-Romance-Anthology-Mail-Order-Bride-Collection-by-Stacy-Henrie.pdf
    • http://loaminoo.linkpc.net/1093094091093090/The-Cowboy-s-E-Mail-Order-Bride-The-Cowboys-of-Chance-Creek-1-by-Cora-Seton.pdf
    • http://loaminoo.linkpc.net/2094096090095095/A-Mail-Order-Bride-for-Bronson-The-Carson-Brothers-of-Kansas-2-by-Carr-White.pdf
    • http://loaminoo.linkpc.net/1090099094094099096/The-Silverback-s-Christmas-Bride-Holiday-Mail-Order-Mates-6-by-Lola-Kidd.pdf
    • http://loaminoo.linkpc.net/4096096096096091/Texas-Mail-Order-Bride-Bachelors-of-Battle-Creek-1-by-Linda-Broday.pdf
    • http://loaminoo.linkpc.net/3097094096091095/Small-Town-Christmas-Return-to-Promise-Mail-Order-Bride-by-Debbie-Macomber.pdf
    • http://loaminoo.linkpc.net/4092092092092096/Mail-Order-Rose-

Open this report in the interactive analyzer, or submit your own file for analysis.