Malicious PDF — malware analysis report

Static analysis result for SHA-256 ae6dca754a6f3967…

MALICIOUS

PDF

19.0 KB Created: 2019-12-28 19:01:58 +00:00 Authoring application: mPDF 5.7
MD5: 14e65ca7551dd4440707fab942659c58 SHA-1: b30823995588b6fbc61079254194fa9de28fc7d2 SHA-256: ae6dca754a6f396799471d522c02f87e873627f60440ce7de62a1284ec94437e
68 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1204.002 Malicious Link

The PDF file contains a large number of embedded URLs, many of which are structured to appear as book titles, indicating a link farm for SEO manipulation. The heuristic 'PDF_SEO_LINK_FARM' confirms this, and the presence of a 'SE_DOWNLOAD_BUTTON' heuristic suggests a lure to encourage clicks. While the URLs themselves are marked as benign, the overall structure and intent point to a malicious campaign focused on driving traffic through deceptive means.

Heuristics 3

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTON
    Document contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://zolcooleo.linkpc.net/8146148143142148/Max-und-Moritz-Illustrierte-Ausgabe-Eines-der-beliebtesten-Kinderb-cher-Deutschlands-Gemeine-Streiche-der-b-sen-Buben-Max-und-Moritz-by-Wilhelm-Busch.pdf
    • http://zolcooleo.linkpc.net/9146148141143149/The-Philosophy-of-Nicolai-Hartmann-by-Nicolai-Hartmann-Society-International-C.pdf
    • http://zolcooleo.linkpc.net/4146145145145142/Ludo-and-the-Star-Horse-by-Mary-Stewart.pdf
    • http://zolcooleo.linkpc.net/7148143144145149/Studies-in-Hindu-Law-and-Dharma-Stra-by-Ludo-Rocher.pdf
    • http://zolcooleo.linkpc.net/7148143145142141/Jimutavahana-s-Dayabhaga-The-Hindu-Law-of-Inheritance-in-Bengal-by-Ludo-Rocher.pdf
    • http://zolcooleo.linkpc.net/9146147145149144/The-Thom-Hartmann-Reader-by-Thom-Hartmann.pdf
    • http://zolcooleo.linkpc.net/7148143145142140/The-Making-of-Western-Indology-Henry-Thomas-Colebrooke-and-the-East-India-Company-by-Rocher-Ludo.pdf
    • http://zolcooleo.linkpc.net/1140147145140140145/Mouseheart---Die-Herrschaft-der-Katzen-by-Lisa-Fiedler.pdf
    • http://zolcooleo.linkpc.net/1140147145140141144/Pyrit---Herrschaft-der-Zeit-by-Katharina-Santa.pdf
    • http://zolcooleo.linkpc.net/1140147145140147145/Romische-Herrschaft-in-Westeuropa-by-Emil-Hubner.pdf
    • http://zolcooleo.linkpc.net/9140147146146143/Die-Legende-von-Shannara-02-Die-Herrschaft-der-Elfen-by-Terry-Brooks.pdf
    • http://zolcooleo.linkpc.net/1140147145140140144/Das-Kaiserreich-Deutschland-unter-preu-ischer-Herrschaft-by-Uwe-Klu-mann.pdf
    • http://zolcooleo.linkpc.net/9141141149143149/Ein-Gl-cklicher-Zungenkuss-und-Z-rtliche-Herrschaft-by-Anine-Francis.pdf
    • http://zolcooleo.linkpc.net/1140146142143148144/Handbuch-F-r-Reisende-in-Italien-by-Ernst-Forster.pdf
    • http://zolcooleo.linkpc.net/1140147144145148142/Geschichte-Des-Buchhandels-in-Italien-by-Stephanie-Rahmede.pdf
    • http://zolcooleo.linkpc.net/1140144142145143140/Die-Herrschaft-Der-K-niginnen-Buch-13-Im-Ring-Der-Zauberei-by-Morgan-Rice.pdf
    • http://zolcooleo.linkpc.net/1141145143143148149/Reisen-in-Italien-Seit-1822-Vol-1-by-Ludwig-Schorn.pdf
    • http://zolcooleo.linkpc.net/2145142142144142/The-New-Measures-by-A-F-Moritz.pdf
    • http://zolcooleo.linkpc.net/8147147149149141/Sexus-und-Herrschaft-Die-Tyrannei-des-Mannes-in-unserer-Gesellschaft-by-Kate-Millett.pdf
    • http://zolcooleo.linkpc.net/1141143148148146148/Herrschaft-und-Heil-Politische-Theologie-in-Alt-gypten-Israel-und-Europa-by-Jan-Assmann.pdf
    • http://zolcooleo.linkpc.net/9146147145149144/The-Thom-Hartmann-Reader-by-Thom-Hartmann.p

Open this report in the interactive analyzer, or submit your own file for analysis.