Malicious PDF — malware analysis report

Static analysis result for SHA-256 b69d4eb77f2d1365…

MALICIOUS

PDF

15.9 KB Created: 2019-05-01 18:10:46 +01:00 Authoring application: mPDF 5.7
MD5: 6bf163f99241f219df2e2a6dc9e37bec SHA-1: 57288b5ec93345801cdec89eefa614625592b218 SHA-256: b69d4eb77f2d13651898217fba32eb258fe21128aead67b24ad5d7f7a10b7123
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF contains a large number of external links, identified by the PDF_SEO_LINK_FARM heuristic. While the URLs themselves are currently marked as benign, the sheer volume and the nature of the heuristic suggest a malicious intent, possibly for SEO poisoning or to distribute further malware. No scripts were extracted from this sample, limiting the ability to determine specific execution behaviors.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc
    • http://loaminoo.linkpc.net/2095094091098092/Civil-War-Poetry-and-Prose-by-Walt-Whitman.pdf
    • http://loaminoo.linkpc.net/5092095092093094/Leaves-of-Grass---A-poetry-collection-by-the-American-poet-Walt-Whitman-Annotated-amp-illustrated-Free-Audio-Links-by-Walt-Whitman.pdf
    • http://loaminoo.linkpc.net/3090095096097097/Walt-Whitman-s-Leaves-of-Grass-by-Walt-Whitman.pdf
    • http://loaminoo.linkpc.net/6093096099090090/Song-of-Myself-by-Walt-Whitman.pdf
    • http://loaminoo.linkpc.net/4098096093098091/Leaves-of-Grass-by-Walt-Whitman.pdf
    • http://loaminoo.linkpc.net/3092093092098/Leaves-of-Grass-by-Walt-Whitman.pdf
    • http://loaminoo.linkpc.net/2092090092091/Walt-Whitman-A-Life-by-Justin-Kaplan.pdf
    • http://loaminoo.linkpc.net/1099097093090/Walt-Whitman-A-Gay-Life-by-Gary-Schmidgall.pdf
    • http://loaminoo.linkpc.net/1098091091092/Walt-Whitman-The-Measure-of-His-Song-by-Jim-Perlman.pdf
    • http://loaminoo.linkpc.net/1091098094092092092/Leaves-of-Grass-Top-100-Books-by-Walt-Whitman.pdf
    • http://loaminoo.linkpc.net/9096091093093097/Grashalme-Illustrierte-Ausgabe-by-Walt-Whitman.pdf
    • http://loaminoo.linkpc.net/7096092096092095/LEAVES-OF-GRASS-Illustrated-Version-SWB-PUBLISHING-by-Walt-Whitman.pdf
    • http://loaminoo.linkpc.net/1091098093097092097/Leaves-of-Grass-Borders-Classics-Series-by-Walt-Whitman.pdf
    • http://loaminoo.linkpc.net/6098092096090092/LEAVES-OF-GRASS-EASTON-PRESS-LEATHERBOUND-COLLECTOR-S-EDITION-by-Walt-Whitman.pdf
    • http://loaminoo.linkpc.net/7096099091097096/Leaves-of-Grass-1855-71-amp-Democratic-Vistas-Everyman-s-Library-by-Walt-Whitman.pdf
    • http://loaminoo.linkpc.net/4091094094092091/American-Poetry-The-Nineteenth-Century-Vol-1-Freneau-to-Whitman-by-John-Hollander.pdf
    • http://loaminoo.linkpc.net/8096099092094098/Adventures-in-Prose-and-Poetry-by-H-C-Schweikert.pdf
    • http://loaminoo.linkpc.net/4092099090094098/Poetry-and-Prose-of-the-Han-Wei-and-Six-Dynasties-by-Panda-Books.pdf
    • http://loaminoo.linkpc.net/1091092092099090096/Selected-Poetry-and-Prose-by-Ilse-Aichinger.pdf
    • http://loaminoo.linkpc.net/6093099093090/Collected-Poetry-amp-Prose-by-Wallace-Stevens.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.