Malicious PDF — malware analysis report

Static analysis result for SHA-256 c8490c2146612d5b…

MALICIOUS

PDF

16.9 KB Created: 2019-04-30 02:02:21 +01:00 Authoring application: mPDF 5.7
MD5: 5fa1fab0b10bb6afb6523603b1e499c6 SHA-1: a40446aae1279402fd294c2090cc71a8e0540f21 SHA-256: c8490c2146612d5b0347995806c7ce741085d140a507ddf426feaec049440e4d
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1059.001 PowerShell

The PDF document contains a large number of embedded URLs, identified as a link farm. While the document body is heavily obfuscated, the presence of numerous links to external sites suggests a malicious intent, possibly for SEO manipulation or to redirect users to malicious content. No scripts were extracted from this sample.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/4098098095094097/Murder-of-a-Snake-in-the-Grass-A-Scumble-River-Mystery-4-by-Denise-Swanson.pdf
    • http://loaminoo.linkpc.net/4098091099093097/Murder-of-a-Barbie-and-Ken-A-Scumble-River-Mystery-5-by-Denise-Swanson.pdf
    • http://loaminoo.linkpc.net/4099091098097090/Murder-of-a-Real-Bad-Boy-A-Scumble-River-Mystery-8-by-Denise-Swanson.pdf
    • http://loaminoo.linkpc.net/3091098092094094/Murder-of-the-Cat-s-Meow-A-Scumble-River-Mystery-15-by-Denise-Swanson.pdf
    • http://loaminoo.linkpc.net/4098098092098091/Murder-of-a-Botoxed-Blonde-A-Scumble-River-Mystery-9-by-Denise-Swanson.pdf
    • http://loaminoo.linkpc.net/4094091094094090/Murder-of-a-Wedding-Belle-A-Scumble-River-Mystery-12-by-Denise-Swanson.pdf
    • http://loaminoo.linkpc.net/3095099098092091/Murder-of-an-Open-Book-A-Scumble-River-Mystery-18-by-Denise-Swanson.pdf
    • http://loaminoo.linkpc.net/3091095098092/Murder-of-a-Small-Town-Honey-A-Scumble-River-Mystery-1-by-Denise-Swanson.pdf
    • http://loaminoo.linkpc.net/6091091095095096/Snake-in-the-Grass-by-Georgia-Blain.pdf
    • http://loaminoo.linkpc.net/4095093092092094/Lost-in-the-River-of-Grass-by-Ginny-Rorby.pdf
    • http://loaminoo.linkpc.net/1099092091098098/The-Everglades-River-of-Grass-by-Marjory-Stoneman-Douglas.pdf
    • http://loaminoo.linkpc.net/8093095098098/Red-Grass-River-A-Legend-by-James-Carlos-Blake.pdf
    • http://loaminoo.linkpc.net/4099091093097096/Murder-in-Bloom-Libby-Sarjeant-Murder-Mystery-Series-by-Lesley-Cookman.pdf
    • http://loaminoo.linkpc.net/4099091093097093/Murder-Imperfect-Libby-Sarjeant-Murder-Mystery-Series-by-Lesley-Cookman.pdf
    • http://loaminoo.linkpc.net/4099091095095099/Murder-in-the-Green-Libby-Sarjeant-Murder-Mystery-Series-by-Lesley-Cookman.pdf
    • http://loaminoo.linkpc.net/3098097092095094/Murder-Becomes-Miami-A-Dalton-Lee-Mystery-The-Murder-Becomes-series-Book-2-by-Jeffrey-Eaton.pdf
    • http://loaminoo.linkpc.net/3098096093096093/Murder-Most-Green-Everything-You-Need-to-Host-a-St-Patrick-s-Day-Murder-Mystery-by-Jack-Pachuta.pdf
    • http://loaminoo.linkpc.net/4092098093096091/Murder-at-the-Academy-Awards-A-Red-Carpet-Murder-Mystery-by-Joan-Rivers.pdf
    • http://loaminoo.linkpc.net/1090096097095095098/A-Merry-Little-Murder-A-Rhodes-to-Murder-Mystery-Bk-1-by-Mary-Welk.pdf
    • http://loaminoo.linkpc.net/3099097092091094/The-Snake-Mistake-Mystery-The-Great-Mistake-Mysteries-3-by-Sylvia-McNicoll.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.