Malicious PDF — malware analysis report

Static analysis result for SHA-256 b1099ef3b3178b65…

MALICIOUS

PDF

33.1 KB Created: 2019-04-29 23:44:36 +01:00 Authoring application: mPDF 5.7
MD5: 7120082dbc0693d60f2a654bda4f7af4 SHA-1: 41b1fcf653fd6e44fb86d64207075daf38544206 SHA-256: b1099ef3b3178b65d80bef4d9e8b18de7162ec32bc8975382400df70cd22f7d4
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1059.001 PowerShell

The PDF file contains a large number of embedded links to external PDFs hosted on the loaminoo.linkpc.net domain. This heuristic firing suggests a link farm or SEO poisoning attempt. While the document body is heavily obfuscated, the presence of numerous links points to a redirection or traffic generation scheme. No scripts were extracted from this sample.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/3096090099097097/The-Purpose-Driven-Church-Every-Church-Is-Big-in-God-s-Eyes-by-Rick-Warren.pdf
    • http://loaminoo.linkpc.net/7090099098093096/The-Manifesto-Church-Records-of-the-Church-in-Brattle-Square-Boston-with-Lists-of-Communicants-Baptisms-Marriages-and-Funerals-1699-1872-by-Church-in-Brattle-Square.pdf
    • http://loaminoo.linkpc.net/7090099098094091/The-Manifesto-Church-Records-of-the-Church-in-Brattle-Square-Boston-With-Lists-of-Communicants-Baptisms-Marriages-and-Funerals-1699-1872-by-Church-in-Brattle-Square-Boston.pdf
    • http://loaminoo.linkpc.net/5094092090097092/Church-Charism-and-Power-Liberation-Theology-and-the-Institutional-Church-by-Leonardo-Boff.pdf
    • http://loaminoo.linkpc.net/4096091093098/The-Book-of-Common-Prayer-and-Administration-of-the-Sacraments-and-Other-Rites-and-Ceremonies-of-the-Church-by-Church-of-England.pdf
    • http://loaminoo.linkpc.net/4092092092094093/Rediscovered-Early-Church-PreMillennialism-Teachings-of-the-Earliest-Church-Fathers-on-Prophecy-by-Robert-H-Franklin.pdf
    • http://loaminoo.linkpc.net/6091090097095093/Vertical-Church-What-Every-Heart-Longs-For-What-Every-Church-Can-Be-by-James-MacDonald.pdf
    • http://loaminoo.linkpc.net/7090098097098095/The-Church-of-God-Or-Essays-on-Various-Names-and-Titles-Given-to-the-Church-in-the-Holy-Scriptures-To-Which-Are-Added-Some-Papers-on-Other-Subjects-by-Ambrose-Serle.pdf
    • http://loaminoo.linkpc.net/7090098098091092/The-Church-of-God-Or-Essays-on-Various-Names-and-Titles-Given-to-the-Church-in-the-Holy-Scriptures-To-Which-Are-Added-Some-Papers-on-Other-Subjects-by-Ambrose-Serle.pdf
    • http://loaminoo.linkpc.net/4091093093090096/Church-History-Volume-One-From-Christ-to-Pre-Reformation-The-Rise-and-Growth-of-the-Church-in-Its-Cultural-Intellectual-and-Political-Context-by-Everett-Ferguson.pdf
    • http://loaminoo.linkpc.net/9099091090098094/Studies-in-church-leadership-New-Testament-church-structure-Paul-and-his-coworkers-an-alternative-theological-education-a-critique-of-catholic-canon-law-by-Thomas-Schirrmacher.pdf
    • http://loaminoo.linkpc.net/9099091095099099/Prayer-Support-System-A-Plan-to-Strengthen-the-Local-Church-by-Rick-Blumenberg.pdf
    • http://loaminoo.linkpc.net/8094093092090094/Sermons-on-the-Manifestation-of-the-Son-of-God-With-a-Preface-Addressed-to-Laymen-on-the-Present-Position-of-the-Clergy-of-the-Church-of-England-and-an-Appendix-on-the-Testimony-of-Scripture-and-the-Church-as-to-the-Possibility-of-Paon-in-the-Future-by-J-Llewelyn-Davies.pdf
    • http://loaminoo.linkpc.net/7090098092095095/Church-Connection-Cards-Connect-with-Visitors-Grow-Your-Church-Pastor-Your-People-Little-Cards-Big-Results-by-Yvon-Prehn.pdf
    • http://loaminoo.linkpc.net/6090097098092099/Vulgus-Britannicus-Or-the-British-Hudibras-in-Fifteen-Canto-s-Containing-the-Secret-History-of-the-London-Mob-Their-Rise-Progress-and-Suppression-Intermix-d-with-the-Civil-Wars-Betwixt-High-Church-and-Low-Church-by-Edward-Ward.pdf
    • http://loaminoo.linkpc.net/3097093099095/Hymns-of-The-Church-of-Jesus-Christ-of-Latter-day-Saints-by-The-Church-of-Jesus-Christ-of-Latter-day-Saints.pdf
    • http://loaminoo.linkpc.net/1094090098098092/Byrd-by-Kim-Church.pdf
    • http://loaminoo.linkpc.net/2099099092097097/Taken-The-Harvest-1-by-M-A-Church.pdf
    • http://loaminoo.linkpc.net/3096096092092095/Why-the-Church-by-Luigi-Giussani.pdf
    • http://loaminoo.linkpc.net/2096099098097093/The-Glorious-Church-by-Watchman-Nee.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.