Malicious PDF — malware analysis report

Static analysis result for SHA-256 b4c19520f00c802f…

MALICIOUS

PDF

18.2 KB Created: 2019-06-04 10:12:46 +01:00 Authoring application: mPDF 5.7
MD5: 78ea972de5ac3af287846e971baa8ba7 SHA-1: b6c2bd5de617b384f41becbff4f3de5ff7d98016 SHA-256: b4c19520f00c802fbea169be08f24f271d564a3af608ce3f574ffcb515f6e77e
60 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell

The PDF file contains a large number of embedded URLs pointing to external PDF documents. The heuristic 'PDF_SEO_LINK_FARM' indicates a mass link farm, suggesting a potential SEO poisoning or traffic redirection scheme. The document body, though heavily obfuscated, contains many of these same URLs, reinforcing the finding. No scripts were extracted from this sample.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/1737733730739736/Sinners-Rock-the-Cradle-Sinners-on-Tour-7-by-Olivia-Cunning.pdf
    • http://cefasfese.4pu.com/8736738730730732/Olivia-and-the-Blueberry-Muffins-Olivia-and-Claire-Book-2-by-Shelle-Allen.pdf
    • http://cefasfese.4pu.com/2735733730730731/The-Howard-Marks-Book-of-Dope-Stories-by-Howard-Marks.pdf
    • http://cefasfese.4pu.com/3732733739732739/Love-and-War-in-London-The-Mass-Observation-Wartime-Diary-of-Olivia-Cockett-by-Olivia-Cockett.pdf
    • http://cefasfese.4pu.com/4734731738739736/Rock-Toons-A-Cartoon-History-of-the-First-30-Years-of-Rock-n-Roll-by-Serge-Dutfoy.pdf
    • http://cefasfese.4pu.com/4739738732730737/Rock-of-Ages-The-Rolling-Stone-History-of-Rock-and-Roll-by-Ed-Ward.pdf
    • http://cefasfese.4pu.com/2737736734730731/The-Prince-of-Punk-Rock-Radical-Rock-Stars-1-by-Jenna-Galicki.pdf
    • http://cefasfese.4pu.com/7737734734738736/The-Sound-and-the-Fury-40-Years-of-Classic-Rock-Journalism-A-Rock-s-Backpages-Reader-by-Barney-Hoskyns.pdf
    • http://cefasfese.4pu.com/9737739737737735/Rock-Deadly-The-Rock-and-Roll-Mysteries-1-by-Kathryn-Lively.pdf
    • http://cefasfese.4pu.com/3739734737731733/Santa-Olivia-Santa-Olivia-No-1-by-Jacqueline-Carey.pdf
    • http://cefasfese.4pu.com/3735734738736739/Santa-Olivia-Santa-Olivia-1-by-Jacqueline-Carey.pdf
    • http://cefasfese.4pu.com/4734731738736736/Life-on-Planet-Rock-From-Guns-N-Roses-to-NIRVana-a-Backstage-Journey-Through-Rock-s-Most-Debauched-Decade-by-Lonn-Friend.pdf
    • http://cefasfese.4pu.com/3734734737731738/Rock-Hard-Rock-Kiss-2-by-Nalini-Singh.pdf
    • http://cefasfese.4pu.com/3732737733734738/Rock-Addiction-Rock-Kiss-1-by-Nalini-Singh.pdf
    • http://cefasfese.4pu.com/3737732737/Rock-Wedding-Rock-Kiss-4-by-Nalini-Singh.pdf
    • http://cefasfese.4pu.com/1734736738730732/Rock-Addiction-Rock-Kiss-1-by-Nalini-Singh.pdf
    • http://cefasfese.4pu.com/1739731735/Rock-Redemption-Rock-Kiss-3-by-Nalini-Singh.pdf
    • http://cefasfese.4pu.com/4731735733737730/My-Rock-5-The-Rock-Star-Romance-5-by-Alycia-Taylor.pdf
    • http://cefasfese.4pu.com/1731739737735738737/AC-DC-Maximum-Rock-Roll-The-Ultimate-Story-of-the-World-s-Greatest-Rock-and-Roll-Band-by-Murray-Engleheart.pdf
    • http://cefasfese.4pu.com/6732738730738/Big-Rock-Big-Rock-1-by-Lauren-Blakely.pdf
    • http://cefasfese.4pu.com/7737734734738736/The-Sound

Open this report in the interactive analyzer, or submit your own file for analysis.