Malicious PDF — malware analysis report

Static analysis result for SHA-256 aadc72ea0ae241fa…

MALICIOUS

PDF

18.0 KB Created: 2019-04-30 03:39:19 +01:00 Authoring application: mPDF 5.7
MD5: 8dce7f922d13e76989a5ca280d8fc141 SHA-1: 53fbec64037bb187eaadf08aa07c6afe3e0b74a6 SHA-256: aadc72ea0ae241fa7d914bda33d4d11b5eedd74e6371ef49eacc696ac43eb81e
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1059.001 PowerShell

The PDF contains a large number of embedded links to external PDF files, a technique often used for SEO manipulation or to distribute further malicious content. While the document body is unreadable, the heuristic 'PDF_SEO_LINK_FARM' strongly indicates this malicious intent. No scripts were extracted from this sample. The primary IOCs are the URLs found within the document.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://xiixmcuin.linkpc.net/1200207207200203201/The-Fault-in-Our-Jars-A-Parody-on-The-Fault-in-Our-Stars-by-John-Green-by-Emilie-Haensel.pdf
    • http://xiixmcuin.linkpc.net/4200209205205/John-Green-the-Collection-Looking-for-Alaska-An-Abundance-of-Katherines-Paper-Towns-Will-Grayson-Will-Grayson-The-Fault-in-Our-Stars-by-John-Green.pdf
    • http://xiixmcuin.linkpc.net/6200200209202201/Bajo-la-misma-estrella-The-Fault-in-Our-Stars-by-John-Green.pdf
    • http://xiixmcuin.linkpc.net/4204207205201204/Earthquake-Storms-The-Fascinating-History-and-Volatile-Future-of-the-San-Andreas-Fault-by-John-Dvorak.pdf
    • http://xiixmcuin.linkpc.net/4205208204205205/Green-Stars-Poems-by-Charlotte-Hilary-Matthews.pdf
    • http://xiixmcuin.linkpc.net/3201200202202208/Green-Smoothie-Everyday-Green-Smoothie-For-Beginners-10-Day-Green-Smoothie-Cleanse-green-smoothies-green-smoothies-detox-green-smoothies-recipes-green-Diet-healthy-food-for-everyday-Book-9-by-Anna-Scott.pdf
    • http://xiixmcuin.linkpc.net/6206201201201200/Stars-of-the-Stars-Stars-of-the-Stars-1-by-P-n-lope-Bagieu.pdf
    • http://xiixmcuin.linkpc.net/4209205201208203/At-the-Seven-Stars-by-John-L-Beatty.pdf
    • http://xiixmcuin.linkpc.net/4200201209204204/Agent-to-the-Stars-by-John-Scalzi.pdf
    • http://xiixmcuin.linkpc.net/4204205209208204/Republic-and-Empire-Imperial-Stars-2-by-John-F-Carr.pdf
    • http://xiixmcuin.linkpc.net/4207206200207201/Through-Struggle-the-Stars-Human-Reach-1-by-John-J-Lumpkin.pdf
    • http://xiixmcuin.linkpc.net/8209203203201205/Looking-for-Alaska-by-John-Green.pdf
    • http://xiixmcuin.linkpc.net/3206205202204201/Let-It-Snow-by-John-Green.pdf
    • http://xiixmcuin.linkpc.net/2207202201209205/Looking-for-Alaska-by-John-Green.pdf
    • http://xiixmcuin.linkpc.net/1204201203203203/Let-It-Snow-by-John-Green.pdf
    • http://xiixmcuin.linkpc.net/6207205209200202/Frankenstein-by-John--Green.pdf
    • http://xiixmcuin.linkpc.net/4205208202/Let-it-Snow-by-John-Green.pdf
    • http://xiixmcuin.linkpc.net/5207202202207204/Die-Fout-by-Ons-Sterre-by-John-Green.pdf
    • http://xiixmcuin.linkpc.net/2204209203200201/An-Abundance-of-Katherines-by-John-Green.pdf
    • http://xiixmcuin.linkpc.net/1200207200204204/Paper-Towns-by-John-Green.pdf
    • http://xiixmcuin.linkpc.net/3201200202202208/Green-Smoothie-Everyday-Green-Smoothie-For-Beginners-10-Day-Green-Smoothie-Cleanse-green-smoothies-green-smoothies-detox-green

Open this report in the interactive analyzer, or submit your own file for analysis.