Malicious PDF — malware analysis report

Static analysis result for SHA-256 b4fe9044fb89ab8c…

MALICIOUS

PDF

13.3 KB Created: 2019-04-30 03:46:51 +01:00 Authoring application: mPDF 5.7
MD5: 77865dba47696aeed60a5698dd3cc77b SHA-1: fb53cddaca4add12eb6a599c8112bfc74d451f97 SHA-256: b4fe9044fb89ab8c2c3ec132a557b720dcdd550c9319c512b575edcc93104326
60 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell

The PDF file contains a large number of embedded URLs, forming a link farm. The heuristic 'PDF_SEO_LINK_FARM' indicates this is likely an attempt to manipulate search engine results or distribute content. While the URLs themselves are marked as benign, the sheer volume and structure suggest a malicious intent to redirect users or potentially host further malicious content. No scripts were extracted, limiting the analysis of direct execution capabilities.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/3092095090092090/Awakenings-by-J-E-Shannon.pdf
    • http://loaminoo.linkpc.net/6095095093094090/Momma-Stop-I-ll-Be-Good-Shannon-s-NH-Diaries-by-Shannon-Bowen.pdf
    • http://loaminoo.linkpc.net/3092092097099096/Awakenings-by-Scarlet-Hyacinth.pdf
    • http://loaminoo.linkpc.net/4094092097091095/Awakenings-Dreamkeepers-1-by-David-Lillie.pdf
    • http://loaminoo.linkpc.net/3099093095097096/World-of-Jinn-Awakenings-by-E-Kerrigan.pdf
    • http://loaminoo.linkpc.net/3095092096099095/Virgin-Awakenings-1-by-Jessica-Freely.pdf
    • http://loaminoo.linkpc.net/1094097093095093/Letting-Go-Awakenings-1-by-Michele-Zurlo.pdf
    • http://loaminoo.linkpc.net/1097090093095097/Hanging-On-Awakenings-2-by-Michele-Zurlo.pdf
    • http://loaminoo.linkpc.net/1093094091099091/Awakenings-Elemental-1-by-Hally-Willmott.pdf
    • http://loaminoo.linkpc.net/1095097092095096/Awakenings-The-Avatar-of-Calderia-1-by-David-M-Echeandia.pdf
    • http://loaminoo.linkpc.net/6090095092096097/Awakenings-Defective-Device-Book-1-by-D-S-Toles.pdf
    • http://loaminoo.linkpc.net/2099097091097094/Awakenings-Guardians-of-Aandor-1-by-Edward-Lazellari.pdf
    • http://loaminoo.linkpc.net/6097093098098090/Libertine-Awakenings-A-Psychosexual-Odyssey-by-Cat-Ravenelle.pdf
    • http://loaminoo.linkpc.net/1098099092099094/Awakened-Vampire-Awakenings-1-by-Brenda-K-Davies.pdf
    • http://loaminoo.linkpc.net/2097090090099091/The-Last-Dance-Sexual-Awakenings-3-by-Angelica-Chase.pdf
    • http://loaminoo.linkpc.net/3091090098096098/The-Tango-Sexual-Awakenings-2-by-Angelica-Chase.pdf
    • http://loaminoo.linkpc.net/3098091091090099/Curtains-Sexual-Awakenings-4-by-Angelica-Chase.pdf
    • http://loaminoo.linkpc.net/1098099090095092/Undone-Vampire-Awakenings-5-by-Brenda-K-Davies.pdf
    • http://loaminoo.linkpc.net/1097090091093098/Two-Masters-for-Samantha-Awakenings-3-by-Michele-Zurlo.pdf
    • http://loaminoo.linkpc.net/1097092098092097/The-Dreamweaver-s-Journey-The-Age-of-Awakenings-Book-1-by-Diana-L-Wicker.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.