Malicious PDF — malware analysis report

Static analysis result for SHA-256 bfbfe60b8057e029…

MALICIOUS

PDF

20.5 KB Created: 2019-11-07 21:28:43 +00:00 Authoring application: mPDF 5.7
MD5: 85dbd7344482e9d4c7586dc1e7eabe69 SHA-1: 144d19310addf33edfa59c1d12e6f9ba7957ae84 SHA-256: bfbfe60b8057e0296752e3639b984c61134d67429d0364eba42e199f1ccc9a5f
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF contains a large number of embedded URLs, identified by the PDF_SEO_LINK_FARM heuristic. These URLs point to various book titles hosted on the same domain, suggesting a potential SEO manipulation scheme or a distribution point for further malicious content. No scripts were extracted from this sample. The primary attack pattern involves leveraging a large number of external links within the document.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/2739737737734733/An-American-Duchess-by-Sharon-Page.pdf
    • http://cefasfese.4pu.com/5730734736733737/Fast-and-Mine-Yardley-College-Bikers-by-Sharon-Page.pdf
    • http://cefasfese.4pu.com/2730730733734739/The-Shape-Changer-s-Wife-by-Sharon-Shinn.pdf
    • http://cefasfese.4pu.com/3739730733731739/Blood-Secret-Blood-5-by-Sharon-Page.pdf
    • http://cefasfese.4pu.com/2739735736732731/Julie-Loaned-Out-Beginnings-of-a-Slutty-Wife-Swinging-Cuckold-Wife-Watching-Slutty-Wife-Julie-Series-Book-1-by-Peaches-Dean.pdf
    • http://cefasfese.4pu.com/6735734732731738/Not-On-Your-Telly-by-Tim-Worthington.pdf
    • http://cefasfese.4pu.com/9730730737737737/Wolfens-by-Raven-R-Worthington.pdf
    • http://cefasfese.4pu.com/9732739736739/The-Pink-Pirate-by-Michelle-Worthington.pdf
    • http://cefasfese.4pu.com/3739735739730739/The-Trumpet-Shall-Sound-by-C-Worthington-Murphy.pdf
    • http://cefasfese.4pu.com/1730732739731735734/The-Home-Metalworker-by-Julian-Worthington.pdf
    • http://cefasfese.4pu.com/2733739735733730/Teddy-Bear-Baker-by-Phoebe-Worthington.pdf
    • http://cefasfese.4pu.com/4734730737730730/Sweet-Memories-Sons-of-Worthington-6-by-Marie-Higgins.pdf
    • http://cefasfese.4pu.com/1738737732738/Dimensions-of-Forgiveness-A-Research-Approach-by-Everett-L-Worthington-Jr-.pdf
    • http://cefasfese.4pu.com/9735736739735737/The-Controversy-Between-Lieutenant-Governor-Spotswood-by-Worthington-Chauncey-1858--From-Ford.pdf
    • http://cefasfese.4pu.com/4734730732738735/The-Sidelined-Wife-More-Than-a-Wife-1-by-Jennifer-Peel.pdf
    • http://cefasfese.4pu.com/5738739733738736/Toulouse-For-Death-Sharon-O-Mara---Book-Three-The-Chronicles-of-Sharon-O-Mara-3-by-Gregory-C-Randall.pdf
    • http://cefasfese.4pu.com/9735737731736733/The-Controversy-Between-Lieutenant-Governor-Spotswood-and-His-Council-and-the-House-of-Burgesses-on-the-Appointment-of-Judges-on-Commissions-of-Oyer-and-Terminer-1718-by-Worthington-Chauncey-Ford.pdf
    • http://cefasfese.4pu.com/3733730730739739/The-System-How-To-Have-The-Business-You-Deserve-Live-Your-Life-And-Run-Your-Business-Your-Way-by-Michael-Worthington.pdf
    • http://cefasfese.4pu.com/3739738733730735/The-Billionaire-s-Wife-The-Complete-Series-The-Billionaire-s-Wife-1-9-by-Ava-Lore.pdf
    • http://cefasfese.4pu.com/5735735735731731/Who-s-Wife-Extraordinaire-Now-Wife-Extraordinaire-4-by-Kiki-Swinson.pdf
    • http://cefasfese.4pu.com/1730732739731735734/The-Home-Metalworker-by-Julian-Worthington

Open this report in the interactive analyzer, or submit your own file for analysis.