Malicious PDF — malware analysis report

Static analysis result for SHA-256 d34326f834dd53ea…

MALICIOUS

PDF

24.9 KB Created: 2019-11-07 09:27:38 +00:00 Authoring application: mPDF 5.7
MD5: 860b19dec3915c4a093af16cab586096 SHA-1: e065034ed558eece9704e708fe540248d739ddba SHA-256: d34326f834dd53ea6eb25c0b2644c04c9e46f9c1143eaa61da9d0dfc93117b49
60 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell

The PDF document contains a large number of embedded links pointing to external PDF files, a technique often used for SEO poisoning or to redirect users to malicious content. The heuristic 'PDF_SEO_LINK_FARM' indicates a mass external link farm, with the first URL being http://cefasfese.4pu.com/9731737736733736/Nicht-ohne-meine-Schwestern-gefangen-und-missbraucht-in-einer-Sekte---unsere-wahre-Geschichte-by-Celeste-Jones.pdf. While many of these URLs were labeled as confirmed benign, the sheer volume and suspicious domain suggest a malicious intent to drive traffic. No scripts were extracted from this sample.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/9731737736733736/Nicht-ohne-meine-Schwestern-gefangen-und-missbraucht-in-einer-Sekte---unsere-wahre-Geschichte-by-Celeste-Jones.pdf
    • http://cefasfese.4pu.com/9738734738734732/Meine-schei-kranke-Familie-Eine-verdammt-wahre-Geschichte-by-Dan-Marshall.pdf
    • http://cefasfese.4pu.com/1731737732738733730/Ungl-ubige-Frauen-betr-gen-ist-keine-S-nde-Eine-wahre-Geschichte-aus-Tunesien-True-Story---Wahre-Geschichte-9-by-Berit-M-.pdf
    • http://cefasfese.4pu.com/1731738737739736734/Nicht-ohne-meine-Kinder-Eine-Mutter-k-mpft-gegen-das-Jugendamt-by-Karin-J-ckel.pdf
    • http://cefasfese.4pu.com/1730734733731730731/Ich-bleib-an-deiner-Seite-Wenn-Liebe-nicht-aufgibt-Eine-wahre-Geschichte---by-Larissa-Murphy.pdf
    • http://cefasfese.4pu.com/1731732734735737737/Spurlos-verschwunden-in-Tunesien-Eine-wahre-Geschichte-von-Marlene-H-True-Story---Wahre-Geschichte-23-by-Marlene-H-.pdf
    • http://cefasfese.4pu.com/9739730737734738/Meine-fremde-Tochter-Geschichte-einer-besonderen-Liebe-by-Lina-May.pdf
    • http://cefasfese.4pu.com/9732738735732738/Hope-Gefangen-und-missbraucht-Wie-wir-10-Jahre-in-den-F-ngen-des-Cleveland-Entf-hrers-berlebten-by-Amanda-Berry.pdf
    • http://cefasfese.4pu.com/8736731730737733/Nicht-ohne-meine-Tochter-Sie-wird-von-ihrem-persischen-Ehemann-in-Teheran-festgehalten-Sie-h-tte-fliehen-k-nnen-ihre-Tochter-aber-sollte-sie-zur-cklassen-by-Betty-Mahmoody.pdf
    • http://cefasfese.4pu.com/1731733737731733732/Gefangen-in-der-Schuld-Er-konnte-sich-nicht-verzeihen-by-Daniela-Buchholz.pdf
    • http://cefasfese.4pu.com/8737736736731736/Gebrandmarkt-Die-wahre-Geschichte-des-Rassismus-in-Amerika-by-Ibram-X-Kendi.pdf
    • http://cefasfese.4pu.com/9738734739732734/Green-River-Killer-Die-wahre-Geschichte-eines-Serienm-rders-by-Jeff-Jensen.pdf
    • http://cefasfese.4pu.com/1730739738730731731/Die-f-nf-Geliebten-meines-Mannes-Eine-wahre-Geschichte-by-Julie-Metz.pdf
    • http://cefasfese.4pu.com/1730736731738738734/Eine-brillante-Masche-Die-fast-wahre-Geschichte-eines-L-gners-by-Jan-Zweyer.pdf
    • http://cefasfese.4pu.com/9738734737738738/Twitter-Eine-wahre-Geschichte-von-Geld-Macht-Freundschaft-und-Verrat-by-Nick-Bilton.pdf
    • http://cefasfese.4pu.com/9733732736735731/Das-Ende-Der-Neuzeit-Menschsein-In-Einer-Welt-Ohne-G-tter-by-Rupert-Lay.pdf
    • http://cefasfese.4pu.com/1731736733737730739/Wie-ich-vom-Weg-abkam-um-nicht-auf-der-Strecke-zu-bleiben-Meine-Pilgerreise-by-Eduard-Freundlinger.pdf
    • http://cefasfese.4pu.com/9738730738732732/Albert-muss-nach-Hause-Die-irgendwie-wahre-Geschichte-eines-Mannes-seiner-Frau-und-ihres-Alligators-by-Homer-Hickam.pdf
    • http://cefasfese.4pu.com/1731736734735738739/Meine-Wiedergeburt-als-Schleim-in-einer-anderen-Welt-01-by-Fuse.pdf
    • http://cefasfese.4pu.com/3739736739737735/Twenty-One-Days-to-a-Better-Attitude-by-Celeste-Jones.pdf
    • http://cefasfese.4pu.com/1731738737739736734/Nicht-ohne-meine-Kinder-Eine-Mutter-k-mpft-gegen

Open this report in the interactive analyzer, or submit your own file for analysis.