Malicious PDF — malware analysis report

Static analysis result for SHA-256 c94eed6e7dce18a1…

MALICIOUS

PDF

16.0 KB Created: 2019-05-02 05:22:13 +01:00 Authoring application: mPDF 5.7
MD5: 95b3c2f3b1816c09da28c707ae909156 SHA-1: cd3968dc29bba4fac0cc405f346e74692bf1261e SHA-256: c94eed6e7dce18a123e01c161fa9773cd919aa5c5a3595fb1c358c769f37f7ab
60 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell

The PDF file contains a large number of embedded URLs, identified as a PDF_SEO_LINK_FARM heuristic. These URLs point to various PDF files hosted on loaminoo.linkpc.net. While the individual URLs are currently marked as benign, the sheer volume and nature of the links suggest a tactic to manipulate search engine results or distribute content, potentially including malicious payloads. No scripts were extracted from this sample.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/1091096093094098/After-Summer-Summer-Boys-3-by-Hailey-Abbott.pdf
    • http://loaminoo.linkpc.net/1091092099090095/The-Secrets-of-Boys-by-Hailey-Abbott.pdf
    • http://loaminoo.linkpc.net/1090097091093097/Waking-Up-to-Boys-by-Hailey-Abbott.pdf
    • http://loaminoo.linkpc.net/4095091091092094/The-Summer-I-Gave-Up-Boys-The-Summer-I-Gave-Up-Boys-1-by-Kassandra-Kush.pdf
    • http://loaminoo.linkpc.net/3096094091099090/Summer-s-Journey-Volume-One---Losing-Control-Summer-s-Journey-1-by-Summer-Daniels.pdf
    • http://loaminoo.linkpc.net/8098091094095/The-Boys-of-Summer-by-Roger-Kahn.pdf
    • http://loaminoo.linkpc.net/1097091095098094/Bad-Boys-of-Summer-by-Lori-Foster.pdf
    • http://loaminoo.linkpc.net/4096092099093099/Third-Base-The-Boys-of-Summer-1-by-Heidi-McLaughlin.pdf
    • http://loaminoo.linkpc.net/1090091091095095/The-Summer-Before-Boys-by-Nora-Raleigh-Baskin.pdf
    • http://loaminoo.linkpc.net/2092090096097091/Pitch-Perfect-Boys-of-Summer-1-by-Sierra-Dean.pdf
    • http://loaminoo.linkpc.net/7094091099097095/Hot-Summer-Love-Box-Set-Five-Full-Length-Sexy-amp-Seductive-Summer-Sizzles-by-Cali-MacKay.pdf
    • http://loaminoo.linkpc.net/2091098092097091/The-Summer-Girls-Lowcountry-Summer-1-by-Mary-Alice-Monroe.pdf
    • http://loaminoo.linkpc.net/4092091093094090/The-Summer-Wind-Lowcountry-Summer-2-by-Mary-Alice-Monroe.pdf
    • http://loaminoo.linkpc.net/1090091091098095094/The-Paleo-Summer-Survival-Guide-12-Must-Have-Recipes-Plus-Insider-Tips-for-a-Healthy-Happy-Summer-by-Julie-Mayfield.pdf
    • http://loaminoo.linkpc.net/1091091099092096097/Isaiah-s-Story-The-Summer-I-Gave-Up-Boys-2-by-Kassandra-Kush.pdf
    • http://loaminoo.linkpc.net/1091094093095091099/Summer-s-Child-amp-Summer-of-Roses-by-Luanne-Rice.pdf
    • http://loaminoo.linkpc.net/3095098099095097/Summer-Series-Boxed-Set-Summer-1-2-3-by-C-J-Duggan.pdf
    • http://loaminoo.linkpc.net/1098090094098095/Since-Last-Summer-Rules-of-Summer-2-by-Joanna-Philbin.pdf
    • http://loaminoo.linkpc.net/2097092092091092/The-Summer-I-Turned-Pretty-Summer-1-by-Jenny-Han.pdf
    • http://loaminoo.linkpc.net/1091092099092097/The-Other-Boy-by-Hailey-Abbott.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.