Malicious PDF — malware analysis report

Static analysis result for SHA-256 b9be5086854fb169…

MALICIOUS

PDF

25.0 KB Created: 2019-04-30 04:23:24 +01:00 Authoring application: mPDF 5.7
MD5: 88a33d9524e1859bd9001b2a5d52c4df SHA-1: cdde93e2773c01d45771096a5e4462890afac5d1 SHA-256: b9be5086854fb1693ed6b555db37ee0375320089cdd3c2988515e8e9934b426b
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF file contains a large number of embedded external links, identified by the PDF_SEO_LINK_FARM heuristic. These links, while appearing to point to academic papers, are likely part of a link farm designed to redirect users to malicious content. No scripts were extracted from this sample, and the document body was heavily obfuscated, limiting further analysis of the specific lure. The primary attack pattern observed is the use of a link farm within a PDF to distribute potentially harmful content.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/5090097093099092/Third-Solitudes-Tradition-and-Discontinuity-in-Jewish-Canadian-Literature-by-Michael-Greenstein.pdf
    • http://loaminoo.linkpc.net/8096096096091093/Jewish-Traditions-in-Early-Christian-Literature-Volume-5-the-Didache-Its-Jewish-Sources-and-Its-Place-in-Early-Judaism-and-Christianity-by-Botho-Walldorf.pdf
    • http://loaminoo.linkpc.net/8099099096096095/Heritage-and-Hellenism-The-Reinvention-of-Jewish-Tradition-by-Erich-S-Gruen.pdf
    • http://loaminoo.linkpc.net/8098090093091096/Finding-God-in-Unexpected-Places-Wisdom-for-Everyone-from-the-Jewish-Tradition-by-Jack-Riemer.pdf
    • http://loaminoo.linkpc.net/4099090094095098/The-Cambridge-Companion-to-Canadian-Literature-by-Eva-Marie-Kr-ller.pdf
    • http://loaminoo.linkpc.net/4094092095090090/The-Female-Tradition-in-Southern-Literature-by-Carol-S-Manning.pdf
    • http://loaminoo.linkpc.net/5091090092099090/Beyond-Silence-Chinese-Canadian-Literature-in-English-by-Lien-Chao.pdf
    • http://loaminoo.linkpc.net/1095098091097/Natural-Supernaturalism-Tradition-and-Revolution-in-Romantic-Literature-by-M-H-Abrams.pdf
    • http://loaminoo.linkpc.net/1094092091098097/Screening-Gender-Framing-Genre-Canadian-Literature-Into-Film-by-Peter-Dickinson.pdf
    • http://loaminoo.linkpc.net/8092092097099098/Diana-Wynne-Jones-The-Fantastic-Tradition-and-Children-s-Literature-by-Farah-Mendlesohn.pdf
    • http://loaminoo.linkpc.net/7093091096092091/Answering-Jewish-Objections-to-Jesus-Traditional-Jewish-Objections-Vol-5-by-Michael-L-Brown.pdf
    • http://loaminoo.linkpc.net/7093091096096093/Answering-Jewish-Objections-to-Jesus-Vol-5-Traditional-Jewish-Objections-by-Michael-Brown.pdf
    • http://loaminoo.linkpc.net/1091095098094096099/Oral-Tradition-and-Hispanic-Literature-Essays-in-Honor-of-Samuel-G-Armistead-by-Mishael-Caspi.pdf
    • http://loaminoo.linkpc.net/2096094093098094/Sohrab-and-Rustem-The-Epic-Theme-of-a-Combat-Between-Father-and-Son-A-Study-of-Its-Genesis-and-Use-in-Literature-and-Popular-Tradition-by-Murray-Anthony-Potter.pdf
    • http://loaminoo.linkpc.net/4098099093096099/From-Ink-Lake-Canadian-Stories-Selected-By-Michael-Ondaatje-by-Michael-Ondaatje.pdf
    • http://loaminoo.linkpc.net/1091091093091096098/The-Jewish-Press---A-Gevalt-from-the-Torah-True-An-Examination-of-the-Concepts-Holocaust-and-Israel-in-the-American-Jewish-Newspaper-the-Jewish-Press-by-Sahra-L-Lindeberg.pdf
    • http://loaminoo.linkpc.net/7097096094095099/Contemplative-Musings-of-a-Canadian-Poet-by-Michael-Frain.pdf
    • http://loaminoo.linkpc.net/1090093095091099095/Literature-And-Folk-Culture-Ireland-And-Newfoundland-Papers-From-The-Ninth-Annual-Seminar-Of-The-Canadian-Association-For-Irish-Studies-At-Memorial-University-Of-Newfoundland-February-11-15-1976-by-Bernice-Schrank.pdf
    • http://loaminoo.linkpc.net/7092098097090092/Artistic-Trickery-The-Tradition-of-Trompe-L-Oeil-Art-by-Michael-Capek.pdf
    • http://loaminoo.linkpc.net/1095097091099091/A-Nation-s-Navy-In-Quest-of-Canadian-Naval-Identity-by-Michael-L-Hadley.pdf
    • http://loaminoo.linkpc.net/4094092095090090/The-Female-Tradition-in-Sout

Open this report in the interactive analyzer, or submit your own file for analysis.