Malicious PDF — malware analysis report

Static analysis result for SHA-256 d192b73d59a6b696…

MALICIOUS

PDF

18.7 KB Created: 2020-03-19 02:37:33 +00:00 Authoring application: mPDF 5.7
MD5: 96606ab49e46fc692970f5a8e6fd7624 SHA-1: c92b9852e38fa67de547973243bef205e1ccfde8 SHA-256: d192b73d59a6b696c8f1d59b1059a7489af37489e7e7d119d60bd46e8012e55e
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF file contains a large number of embedded links, identified by the PDF_SEO_LINK_FARM heuristic. These links point to various PDF files hosted on the domain 'ieuicufioao.myhome.cx'. The sheer volume and repetitive nature of these links suggest a malicious intent, likely to manipulate search engine results or redirect users to potentially harmful content. No scripts were extracted, and the document body was unreadable.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://ieuicufioao.myhome.cx/3554555556553551/A-Cold-Creek-Secret-Cowboys-of-Cold-Creek-7-by-RaeAnne-Thayne.pdf
    • http://ieuicufioao.myhome.cx/3554555556553552/A-Cold-Creek-Holiday-Cowboys-of-Cold-Creek-6-by-RaeAnne-Thayne.pdf
    • http://ieuicufioao.myhome.cx/3554552551554554/Dancing-In-The-Moonlight-Cowboys-of-Cold-Creek-2-by-RaeAnne-Thayne.pdf
    • http://ieuicufioao.myhome.cx/3554555556554559/The-Cowboys-of-Chance-Creek-Books-1-3-The-Cowboys-of-Chance-Creek-1-3-by-Cora-Seton.pdf
    • http://ieuicufioao.myhome.cx/7555550557559554/Le-rempart-du-mensonge---Nuit-d-hiver-Cold-Creek-Le-d-fi-des-Hollister-t-4-by-Beverly-Long.pdf
    • http://ieuicufioao.myhome.cx/3557554552558550/A-Cadence-Creek-Christmas-Cadence-Creek-Cowboys-5-by-Donna-Alward.pdf
    • http://ieuicufioao.myhome.cx/4556556555553557/The-Rebel-of-Copper-Creek-Copper-Creek-Cowboys-2-by-R-C-Ryan.pdf
    • http://ieuicufioao.myhome.cx/4554551552559556/Cowboys-And-Cabernet-Crystal-Creek-2-by-Margot-Dalton.pdf
    • http://ieuicufioao.myhome.cx/2559556559551559/The-Trouble-with-Cowboys-Catcher-Creek-1-by-Melissa-Cutler.pdf
    • http://ieuicufioao.myhome.cx/2557554559557550/The-Cowboy-Imports-a-Bride-The-Cowboys-of-Chance-Creek-3-by-Cora-Seton.pdf
    • http://ieuicufioao.myhome.cx/2557554557550550/The-Cowboy-Rescues-a-Bride-The-Cowboys-of-Chance-Creek-7-by-Cora-Seton.pdf
    • http://ieuicufioao.myhome.cx/2557555552550558/The-Cowboy-Wins-a-Bride-The-Cowboys-of-Chance-Creek-2-by-Cora-Seton.pdf
    • http://ieuicufioao.myhome.cx/2557554559554558/The-Cowgirl-Ropes-a-Billionaire-The-Cowboys-of-Chance-Creek-4-by-Cora-Seton.pdf
    • http://ieuicufioao.myhome.cx/6557557553551559/Return-to-Elm-Creek-More-Quilt-Projects-Inspired-by-the-Elm-Creek-Quilts-Novels-by-Jennifer-Chiaverini.pdf
    • http://ieuicufioao.myhome.cx/1551554552556/Redemption-Bay-Haven-Point-2-by-RaeAnne-Thayne.pdf
    • http://ieuicufioao.myhome.cx/1551559553556/High-Risk-Affair-by-RaeAnne-Thayne.pdf
    • http://ieuicufioao.myhome.cx/3557553559559554/Christmas-on-Main-Street-Snowberry-Creek-1-5-Shelter-Bay-6-5-Cricket-Creek-5-5-Bayberry-Island-0-5-by-JoAnn-Ross.pdf
    • http://ieuicufioao.myhome.cx/2552555550553550/Evergreen-Springs-Haven-Point-3-by-RaeAnne-Thayne.pdf
    • http://ieuicufioao.myhome.cx/2552554557550559/Christmas-in-Snowflake-Canyon-Hope-s-Crossing-6-by-RaeAnne-Thayne.pdf
    • http://ieuicufioao.myhome.cx/3557553552553552/An-Angel-for-Dry-Creek-Dry-Creek-1-by-Janet-Tronstad.pdf
    • http://ieuicufioao.myhome.cx/4554551552559556/Cowboys-A

Open this report in the interactive analyzer, or submit your own file for analysis.