Malicious PDF — malware analysis report

Static analysis result for SHA-256 b95929c579ddc5d3…

MALICIOUS

PDF

28.8 KB Created: 2019-05-02 05:06:22 +01:00 Authoring application: mPDF 5.7
MD5: 4d1808b1e14c27c605829b8332f342fc SHA-1: 2ad5166a87393ca0bfdb69ff5a8771934c0c2908 SHA-256: b95929c579ddc5d3259433bcb689d93048cb9c6da5633abac6aaed44448cafeb
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF file contains a large number of embedded links pointing to external PDF files hosted on the `loaminoo.linkpc.net` domain. This heuristic firing suggests a link farm, likely intended for SEO manipulation or to distribute further malicious content. While no scripts were extracted, the sheer volume of links and the use of a dynamic DNS domain are suspicious. The attack pattern is inferred from the link farm behavior.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/1090092091099091099/Lego-Dc-amp-marvel-Super-Heroes-Coloring-Book-for-Kids-and-Adults-by-Mr-Akim.pdf
    • http://loaminoo.linkpc.net/7090090091092092/Asterix-and-Obelix-Coloring-Book-Coloring-Book-for-Kids-and-Adults-This-Amazing-Coloring-Book-Will-Make-Your-Kids-Happier-and-Give-Them-Joy-Best-Books-for-Adults-and-Kids-2-4-4-8-8-12-by-Emma-Kovtun.pdf
    • http://loaminoo.linkpc.net/1090092091098095098/Gravity-Falls-Coloring-Book-Great-Activity-Book-for-Kids-and-Adults-by-Mr-Akim.pdf
    • http://loaminoo.linkpc.net/1090092091098096092/Masha-and-the-Bear-Coloring-Book-Beautiful-Coloring-Pages-for-Kids-40-Illustrations-by-Mr-Akim.pdf
    • http://loaminoo.linkpc.net/6099099099090096/Asterix-and-Obelix-Coloring-Book-Coloring-Book-for-Kids-and-Adults---30-Illustrations-by-Eddie-Com.pdf
    • http://loaminoo.linkpc.net/1090092091099091096/Shopkins-Coloring-Book-For-Kids-Ages-3-10-by-Mr-Akim.pdf
    • http://loaminoo.linkpc.net/1091095090090092096/Bonobo-Coloring-Book-for-Adults-Relaxation-Meditation-Blessing-Sketches-Coloring-Book-40-Grayscale-Images-by-Jessica-Belcher.pdf
    • http://loaminoo.linkpc.net/4099093093091091/A-Coloring-Book-for-Adults-Remember-the-Joy-of-Coloring-and-Reduce-Stress-Volume-2-by-Amber-Richards.pdf
    • http://loaminoo.linkpc.net/4097099090092093/legomath-box-3-in-1-set-lego-fractions---lego-addition-and-subtraction-and-lego-multiplcation-lego-math-Book-4-by-ZACH-ABRAHAM.pdf
    • http://loaminoo.linkpc.net/3091092097097091/Books-for-Kids-Super-Ants-Illustration-Book-kids-books-Ages-3-8-Bedtime-Stories-For-Kids-Children-s-Books-beginner-reader-books-Bugs-amp-Spiders-1-by-Robot-J-.pdf
    • http://loaminoo.linkpc.net/6098096099097092/Collection-of-five-4--and-8-Wheel-Reefer-Wagons-Lego-MOC-building-instructions-Lego-Train-MOC-plans-Book-6-by-E-Chaton.pdf
    • http://loaminoo.linkpc.net/6098097090090092/Collection-of-six-4--and-8-Wheel-Stake-Wagons-Lego-MOC-building-instructions-Lego-Train-MOC-Plans-Book-2-by-E-Chaton.pdf
    • http://loaminoo.linkpc.net/5095094092091096/Diabolic-Adult-Coloring-Book-Devilish-Satanic-and-Wiccan-Possession-Inspired-Adult-Coloring-Book-by-Diabolic-Adult-Coloring-Book.pdf
    • http://loaminoo.linkpc.net/6098096099099095/4-Wheel-and-8-Wheel-Tank-Wagons-Lego-MOC-building-instructions-Lego-Train-MOC-Plans-Book-1-by-E-Chaton.pdf
    • http://loaminoo.linkpc.net/8098098093090095/Rotk-ppchen-M-rchen-Malbuch-Little-Red-Riding-Hood-Fairy-Tale-and-Coloring-Pages-Zweisprachig-in-Deutsch-und-Englisch-Bilingual-German---English-Book-for-Kids-by-Charles-Perrault.pdf
    • http://loaminoo.linkpc.net/1091096095092090099/Coloring-To-Relax-The-Mind---Adult-Coloring-Book-by-Mary-D-Brooks.pdf
    • http://loaminoo.linkpc.net/4096090099090090/Believe-in-Yourself-An-Adult-Coloring-Book-featuring-Positive-Affirmations-by-I-M-Coloring.pdf
    • http://loaminoo.linkpc.net/1090096092099091093/Seamus-Starr-Super-Hero-Kids-From-Marrs-Book-1-by-Patti-Marrs-Magill.pdf
    • http://loaminoo.linkpc.net/3096092096/Ms-Marvel-Vol-5-Super-Famous-by-G-Willow-Wilson.pdf
    • http://loaminoo.linkpc.net/9091096091094093/Legion-of-Super-Heroes-1994--97-Legion-of-Super-Heroes-1994--by-Tom-McCraw.pdf
    • http://loaminoo.linkpc.net/1090092091098096092/Masha-and-the-B

Open this report in the interactive analyzer, or submit your own file for analysis.