Malicious PDF — malware analysis report

Static analysis result for SHA-256 cb3a3279701497a6…

MALICIOUS

PDF

18.8 KB Created: 2019-04-30 18:45:37 +01:00 Authoring application: mPDF 5.7
MD5: 6f7327a1b484737340cfb01b61efdcb9 SHA-1: 8e823b36060cab862aa9c528a671821f71419bce SHA-256: cb3a3279701497a6e0befa873aac5cb4d5b5f9fc7ebbc32c10851228a13dfee6
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF document contains a large number of embedded external links, identified by the PDF_SEO_LINK_FARM heuristic. While many of these links point to seemingly benign content, the sheer volume and the use of a dynamic DNS hostname suggest a potential for distributing malicious payloads or engaging in SEO spam. No scripts were extracted from this sample, limiting the ability to determine a specific payload delivery mechanism.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/9091096097097090/Astral-by-Eric-Kasten.pdf
    • http://loaminoo.linkpc.net/5094097097095/How-To-Build-a-Pallet-and-Plastic-Bottle-Greenhouse-from-Junk-A-Self-Build-Project-by-Eco-T-.pdf
    • http://loaminoo.linkpc.net/9098094095093095/Smart-People-Should-Build-Things-How-to-Restore-Our-Culture-of-Achievement-Build-a-Path-for-Entrepreneurs-and-Create-New-Jobs-in-America-by-Andrew-Yang.pdf
    • http://loaminoo.linkpc.net/1099099090094090/Begin-Again-Again-1-by-Mona-Kasten.pdf
    • http://loaminoo.linkpc.net/9091096097091095/The-Iron-Spear-by-Victoria-Kasten.pdf
    • http://loaminoo.linkpc.net/9091096098093097/Great-Neck-by-Alice-Kasten.pdf
    • http://loaminoo.linkpc.net/9091096099091096/Even-Tales-Songs-and-Worldviews-by-Erich-Kasten.pdf
    • http://loaminoo.linkpc.net/9091096099090094/Neuropsychologie-in-Forchung-Und-Praxis-by-Erich-Kasten.pdf
    • http://loaminoo.linkpc.net/9091096097090097/Balkonblumen-in-T-pfen-K-sten-und-Ampeln-by-Martin-Weimar.pdf
    • http://loaminoo.linkpc.net/9091096097097099/Ein-Kasten-Bier-denn-nichts-ist-umsonst-by-Dari-Goldchild.pdf
    • http://loaminoo.linkpc.net/9091096098094095/Linking-Your-Beads-The-Rosary-s-History-Mysteries-Prayers-by-Patricia-Ann-Kasten.pdf
    • http://loaminoo.linkpc.net/9091096097090099/Linking-Your-Beads-The-Rosary-s-History-Mysteries-and-Prayers-by-Patricia-Kasten.pdf
    • http://loaminoo.linkpc.net/9091096096096094/Secret-Journey-to-Planet-Serpo-A-True-Story-of-Interplanetary-Travel-by-Len-Kasten.pdf
    • http://loaminoo.linkpc.net/9091096099091099/The-Jericho-Principle-How-Companies-Use-Strategic-Collaboration-to-Find-New-Sources-of-Value-by-Vince-Kasten.pdf
    • http://loaminoo.linkpc.net/9091096099091098/Neuphilologisches-Centralblatt-1896-Vol-10-Organ-Der-Vereine-F-r-Neuere-Sprachen-in-Deutschland-by-W-Kasten.pdf
    • http://loaminoo.linkpc.net/9091096096096096/Alien-World-Order-The-Reptilian-Plan-to-Divide-and-Conquer-the-Human-Race-by-Len-Kasten.pdf
    • http://loaminoo.linkpc.net/9091096099091091/Making-Sense-of-Saints-Fascinating-Facts-about-Relics-Patrons-Canonization-and-More-by-Patricia-Ann-Kasten.pdf
    • http://loaminoo.linkpc.net/4093094097097095/Eric-Olafson-Space-Pirate-Eric-Olafson-Series-by-Vanessa-Ravencroft.pdf
    • http://loaminoo.linkpc.net/4097096098095099/The-Crafty-Cockney-Eric-Bristow-The-Autobiography-by-Eric-Bristow.pdf
    • http://loaminoo.linkpc.net/9093099096094096/Build-Me-Up-by-Lily-Rede.pdf
    • http://loaminoo.linkpc.net/9091096097090097/Balkonblumen-in-T-pfen-K-ste

Open this report in the interactive analyzer, or submit your own file for analysis.