Malicious PDF — malware analysis report

Static analysis result for SHA-256 cdb84c0f509fe15c…

MALICIOUS

PDF

18.0 KB Created: 2019-05-02 00:55:00 +01:00 Authoring application: mPDF 5.7
MD5: 71d97da3a066f1c335f5ac9e0f8b82a3 SHA-1: f1ffc1c86ae1d161d057e7abdc04593a82ef76d3 SHA-256: cdb84c0f509fe15c7e69d7c80a6d4004bdf221c7dc7312a78f3e253472731747
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF file contains a large number of embedded links, identified by the PDF_SEO_LINK_FARM heuristic. While the URLs themselves are marked as benign, the sheer volume and the nature of the heuristic suggest a malicious intent, possibly for SEO manipulation or to distribute further malicious content. No scripts were extracted from this sample, and the document body was unreadable.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/1090090097094092092/Star-Trek-Planet-der-Affen-by-Scott-Tipton.pdf
    • http://loaminoo.linkpc.net/8096092096099090/Star-Trek-Die-n-chste-Generation---Planet-der-Waffen-Star-Trek-The-Next-Generation-5-by-Peter-David.pdf
    • http://loaminoo.linkpc.net/7098092095095092/Perry-s-Planet-Star-Trek-Adventures-13-by-Jack-C-Haldeman-II.pdf
    • http://loaminoo.linkpc.net/1096093092097092/Star-Trek-II-The-Wrath-Of-Khan-Star-Trek-TOS-Movie-Novelizations-2-by-Vonda-N-McIntyre.pdf
    • http://loaminoo.linkpc.net/6094096097094091/The-Garden-Star-Trek-Voyager-11-by-Melissa-Scott.pdf
    • http://loaminoo.linkpc.net/1090092091097093091/Star-Trek-Log-Four-Star-Trek-Logs-4-by-Alan-Dean-Foster.pdf
    • http://loaminoo.linkpc.net/1090092091095097095/Star-Trek-Log-One-Star-Trek-Logs-1-by-Alan-Dean-Foster.pdf
    • http://loaminoo.linkpc.net/8096092096098098/Star-Trek-Die-n-chste-Generation---Eine-H-lle-namens-Paradies-Star-Trek-The-Next-Generation-11-by-Peter-David.pdf
    • http://loaminoo.linkpc.net/3096096099095095/Doctor-Who-Prisoners-of-Time-7-by-Scott-Tipton.pdf
    • http://loaminoo.linkpc.net/3096096097090099/Doctor-Who-Prisoners-of-Time-12-by-Scott-Tipton.pdf
    • http://loaminoo.linkpc.net/3096096099094090/Doctor-Who-Prisoners-of-Time-9-by-Scott-Tipton.pdf
    • http://loaminoo.linkpc.net/3096096099096092/Doctor-Who-Prisoners-of-Time-6-by-Scott-Tipton.pdf
    • http://loaminoo.linkpc.net/5092098099097099/Star-Trek-Star-Fleet-Technical-Manual-by-Franz-Joseph.pdf
    • http://loaminoo.linkpc.net/1096091094092091/Kirk-The-Star-to-Every-Wandering-Star-Trek-Crucible-3-by-David-R-George-III.pdf
    • http://loaminoo.linkpc.net/1090094094093090099/When-Is-a-Planet-Not-a-Planet-The-Story-of-Pluto-by-Elaine-Scott.pdf
    • http://loaminoo.linkpc.net/1090090097093092096/Affen-Terrier-Activities-Affen-Terrier-Tricks-Games-amp-Agility-Includes-Affen-Terrier-Beginner-to-Advanced-Tricks-Fun-Games-Agility-amp-More-by-Colin-Martin.pdf
    • http://loaminoo.linkpc.net/2093097093092090/Star-Trek-4-by-James-Blish.pdf
    • http://loaminoo.linkpc.net/6090096098094099/Star-Trek-Khan-by-Mike-Johnson.pdf
    • http://loaminoo.linkpc.net/2091090091090093/Star-Trek-by-Alan-Dean-Foster.pdf
    • http://loaminoo.linkpc.net/6094096097090098/Caretaker-Star-Trek-Voyager-1-by-L-A-Graf.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.