Malicious PDF — malware analysis report

Static analysis result for SHA-256 b9f3ecd3e918754a…

MALICIOUS

PDF

31.1 KB Created: 2019-04-30 04:10:18 +01:00 Authoring application: mPDF 5.7
MD5: 83dbce389f0fb3b12720ea115e6f9799 SHA-1: 2cb15f76e3362bb8059df54e39928f05cb8553ef SHA-256: b9f3ecd3e918754a8bcc8ff786788fb25bacab18d294e641f72cfbb988084cef
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF file contains a large number of embedded URLs, identified as a link farm. The primary heuristic indicates this is a critical finding, suggesting the document's purpose is to direct users to numerous external sites. While the document body is heavily obfuscated, the presence of these links strongly implies a malicious intent, possibly for SEO manipulation or to serve as a distribution point for further malware. No scripts were extracted from this sample.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/1091092095093097099/Touched-by-an-Alien-Katherine-quot-Kitty-quot-Katt-1-by-Gini-Koch.pdf
    • http://loaminoo.linkpc.net/1090097090096/Touched-by-an-Alien-Katherine-quot-Kitty-quot-Katt-1-by-Gini-Koch.pdf
    • http://loaminoo.linkpc.net/1093092099098092/Alien-Tango-Katherine-quot-Kitty-quot-Katt-2-by-Gini-Koch.pdf
    • http://loaminoo.linkpc.net/3098097096098095/Alien-Education-Katherine-quot-Kitty-quot-Katt-15-by-Gini-Koch.pdf
    • http://loaminoo.linkpc.net/2094099090093092/Universal-Alien-Katherine-quot-Kitty-quot-Katt-10-by-Gini-Koch.pdf
    • http://loaminoo.linkpc.net/3092091098094099/Alien-Rescue-Katherine-quot-Kitty-quot-Katt-19-by-Gini-Koch.pdf
    • http://loaminoo.linkpc.net/1090090093099098097/-quot-Mean-Little-Kitty-quot-and-quot-Waiting-Room-at-the-Hero-League-quot-by-Kater-Cheek.pdf
    • http://loaminoo.linkpc.net/5094092093097099/Asterix-amp-Friends-quot-Asterix-the-Gladiator-quot-quot-Asterix-in-Switzerland-quot-quot-Mansions-of-the-Gods-quot-quot-Asterix-and-the-Laurel-Wreath-quot-quot-Obelix-and-Co-quot-by-Ren-Goscinny.pdf
    • http://loaminoo.linkpc.net/2099092094097/Alien-in-the-Family-by-Gini-Koch.pdf
    • http://loaminoo.linkpc.net/1090094090095094094/Vergleich-Der-Darstellung-Des-quot-Wunderbaren-quot-in-Johann-Hartliebs-quot-Alexanderroman-quot-Und-Gottfried-Von-Straburgs-quot-Tristan-quot-by-Katharina-Neuhaus.pdf
    • http://loaminoo.linkpc.net/8097096094092096/Zauberherz-und-Liebeswunder-Drei-Romane-in-einem-eBook-quot-Body-Switch-quot-quot-Hungry-for-Love-quot-und-quot-Von-M-usen-und-Million-ren-quot-by-Ashley-Bloom.pdf
    • http://loaminoo.linkpc.net/2098098092095097/The-Third-Inspector-Morse-Omnibus-quot-Last-Bus-to-Woodstock-quot-quot-Wench-Is-Dead-quot-quot-Jewel-That-Was-Ours-quot-by-Colin-Dexter.pdf
    • http://loaminoo.linkpc.net/1091092098090097097/Philosophische-Elemente-im-Werk-von-Max-Frisch-Grundph-nomene-menschlicher-Existenz-in-den-Romanen-quot-Stiller-quot-quot-Homo-faber-quot-und-quot-Mein-Name-sei-Gantenbein-quot-by-Frauke-Maria-Ho-.pdf
    • http://loaminoo.linkpc.net/1091096094095093097/Der-Ausflug-Ins-Innere-Der-Eigenen-Personlichkeit-Zur-Funktion-Der-Zitate-Im-Werk-Arno-Schmidts-Am-Beispiel-Von-quot-Brand-s-Haide-quot-quot-Kaff-Auch-Mare-Crisium-quot-Und-quot-Zettel-s-Traum-quot-by-Wolfgang-Hink.pdf
    • http://loaminoo.linkpc.net/1091096094095093098/Utopische-Prosa-ALS-L-Ngeres-Gedankenspiel-Untersuchungen-Zu-Arno-Schmidts-Theorie-Der-Modernen-Literatur-Und-Ihrer-Konkretisierung-in-quot-Schwarze-Spiegel-quot-quot-die-Gelehrtenrepublik-quot-Und-quot-Kaff-Auch-Mare-Crisium-quot-by-Boy-Hinrichs.pdf
    • http://loaminoo.linkpc.net/2098097097097093/Ruth-Rendell-Omnibus-II-quot-From-Doon-with-Death-quot-quot-Some-Lie-and-Some-Die-quot-quot-Shake-Hands-for-Ever-quot-quot-A-Sleeping-Life-quot-by-Ruth-Rendell.pdf
    • http://loaminoo.linkpc.net/9095096092095096/Metafiktion-und-sthetik-in-Christa-Wolfs-quot-Nachdenken-ber-Christa-T-quot-quot-Kindheitsmuster-quot-und-quot-Sommerst-ck-quot-by-Ursula-Ackrill.pdf
    • http://loaminoo.linkpc.net/1090097099092096097/Gerhart-Hauptmann-quot-Bahnw-rter-Thiel-quot-quot-Vor-Sonnenaufgang-quot-quot-Der-Apostel-quot-quot-Der-Ketzer-von-Soana-quot-by-Gerhart-Hauptmann.pdf
    • http://loaminoo.linkpc.net/1090097092092094096/Operation-Gatekeeper-The-Rise-of-the-quot-Illegal-Alien-quot-and-the-Making-of-the-U-S--Mexico-Boundary-by-Joseph-Nevins.pdf
    • http://loaminoo.linkpc.net/3093090096095/My-Story-quot-A-Child-Called-It-quot-quot-The-Lost-Boy-quot-quot-A-Man-Named-Dave-quot-by-Dave-Pelzer.pdf
    • http://loaminoo.linkpc.net/

Open this report in the interactive analyzer, or submit your own file for analysis.