Malicious PDF — malware analysis report

Static analysis result for SHA-256 ba605b097082d738…

MALICIOUS

PDF

14.6 KB Created: 2019-05-01 17:51:08 +01:00 Authoring application: mPDF 5.7
MD5: 658b71bc8f3edacb2bad5a0bba67520c SHA-1: 01b7b683a1a5346c70485ea7ff091409b508fd56 SHA-256: ba605b097082d7380ae2c59598d1d6a0dcd1575452606a759d92d465a08b80dc
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1204.002 Malicious Link

The PDF file contains a large number of embedded links to external PDF documents, a technique often used for SEO manipulation or to distribute malicious content. The heuristic 'PDF_SEO_LINK_FARM' specifically flags this behavior, indicating a potential attempt to drive traffic or distribute further payloads. No scripts were extracted from this sample.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/1098093098091090/Ascension-by-S-L-Madden.pdf
    • http://loaminoo.linkpc.net/5091092097094/Ascension-An-Analysis-of-the-Art-of-Ascension-as-Taught-by-the-Ishayas-by-Maharishi-Sadasiva-Isham.pdf
    • http://loaminoo.linkpc.net/7099095099093097/Eclipse-The-Lost-Book-of-Ascension-Books-of-Ascension-3-by-Dirk-Strasser.pdf
    • http://loaminoo.linkpc.net/1093094095096094/Brink-of-Eternity-Guardians-of-Ascension-2-5-Dawn-of-Ascension-1-by-Caris-Roane.pdf
    • http://loaminoo.linkpc.net/1093094096093099/The-Darkening-Guardians-of-Ascension-6-5-Dawn-of-Ascension-2-by-Caris-Roane.pdf
    • http://loaminoo.linkpc.net/2094093094094091/Ascension-The-Revelation-Ascension-Trilogy-1-by-Jennifer-Turner.pdf
    • http://loaminoo.linkpc.net/1096092093090093/Ascension-The-End-Game-by-A-P-West.pdf
    • http://loaminoo.linkpc.net/1091098090096098/Ascension-by-Steven-Galloway.pdf
    • http://loaminoo.linkpc.net/4090097090099093/The-Affiliate-Ascension-1-by-K-A-Linde.pdf
    • http://loaminoo.linkpc.net/2092091098095092/The-Last-Incarnation-The-Ascension-1-by-J-A-Giunta.pdf
    • http://loaminoo.linkpc.net/1091094096099097/Ascension-Dominion-2-by-S-E-Lund.pdf
    • http://loaminoo.linkpc.net/3095094094091092/Ascension-Phobos-1-by-Victor-Dixen.pdf
    • http://loaminoo.linkpc.net/1092097091093094/Ruled-by-Steel-Ascension-3-by-S-M-Reine.pdf
    • http://loaminoo.linkpc.net/3090096092095095/Sacrificed-in-Shadow-Ascension-1-by-S-M-Reine.pdf
    • http://loaminoo.linkpc.net/2095097097095095/The-Well-of-Ascension-Mistborn-2-by-Brandon-Sanderson.pdf
    • http://loaminoo.linkpc.net/4096090092094098/The-Well-of-Ascension-Mistborn-2-by-Brandon-Sanderson.pdf
    • http://loaminoo.linkpc.net/1092094090094094/Ascension-Gryphon-4-by-Stacey-Rourke.pdf
    • http://loaminoo.linkpc.net/3092098096098/The-Well-of-Ascension-Mistborn-2-by-Brandon-Sanderson.pdf
    • http://loaminoo.linkpc.net/1092098095096095/Caged-in-Bone-Ascension-4-by-S-M-Reine.pdf
    • http://loaminoo.linkpc.net/8098094098092095/Ascension-Demon-s-Grail-1-by-Amy-Cross.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.