Malicious PDF — malware analysis report

Static analysis result for SHA-256 d4515bd536cdc193…

MALICIOUS

PDF

15.8 KB Created: 2019-04-30 04:17:09 +01:00 Authoring application: mPDF 5.7
MD5: 70dc95ae0193dbeb01f7b8888d2726d9 SHA-1: fd13ef0426f197e292e0c312a6905b43794bf021 SHA-256: d4515bd536cdc193809e2e9ad7e6a78db76f64691e32e9b179044881a99bf265
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF file contains a large number of embedded URLs, forming a link farm. The primary heuristic indicates this is a critical finding, suggesting the document's purpose is to direct users to a high volume of external content. No scripts were extracted from this sample. The URLs themselves are marked as confirmed benign, but the sheer volume and structure suggest a malicious intent to drive traffic or potentially mask other malicious activities.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/9092098094098092/Atlas-Of-Ultrasound-Anatomy-Normal-Anatomy-As-The-Basis-Of-Sonographic-Diagnosis-by-Werner-Swobodnik.pdf
    • http://loaminoo.linkpc.net/1090096096094096090/Computerized-Tomography-Of-The-Lung-Normal-Anatomy-And-Most-Common-Disorders-by-Miriam-Sperber.pdf
    • http://loaminoo.linkpc.net/1090098096090090095/Defining-the-New-Normal-A-Guide-to-Becoming-More-Than-Your-Diagnosis-by-Colleen-Brunetti.pdf
    • http://loaminoo.linkpc.net/5093098092099/Mad-Anatomy-by-Kimberly-Nichols.pdf
    • http://loaminoo.linkpc.net/4098098097092098/Anatomy-of-a-Night-by-Anna-Kim.pdf
    • http://loaminoo.linkpc.net/1095099093099097/Anatomy-of-a-Poet-by-C-J-Heck.pdf
    • http://loaminoo.linkpc.net/1090095096094093090/Anatomy-of-a-Jury-by-Seymour-Wishman.pdf
    • http://loaminoo.linkpc.net/4093095090090097/Anatomy-of-a-Player-by-Cindi-Madsen.pdf
    • http://loaminoo.linkpc.net/1098096098094099/Anatomy-of-a-Disappearance-by-Hisham-Matar.pdf
    • http://loaminoo.linkpc.net/4093095091096090/Anatomy-of-Animals-by-Dave-Kellett.pdf
    • http://loaminoo.linkpc.net/1099094091097090/Anatomy-of-a-Soldier-by-Harry-Parker.pdf
    • http://loaminoo.linkpc.net/7096096093/Anatomy-of-a-Miracle-by-Jonathan-Miles.pdf
    • http://loaminoo.linkpc.net/1090093094091090/Anatomy-of-a-Disappearance-by-Hisham-Matar.pdf
    • http://loaminoo.linkpc.net/3099095092092093/Anatomy-of-a-Misfit-by-Andrea-Portes.pdf
    • http://loaminoo.linkpc.net/1092096095090095/The-Melancholy-of-Anatomy-by-Shelley-Jackson.pdf
    • http://loaminoo.linkpc.net/2095094096091095/Forensics-The-Anatomy-of-Crime-by-Val-McDermid.pdf
    • http://loaminoo.linkpc.net/1090098097095090098/Anatomy-of-the-SS-State-by-Hans-Buchheim.pdf
    • http://loaminoo.linkpc.net/4093090091095093/Anatomy-for-the-Artist-by-Jen-Barcsay.pdf
    • http://loaminoo.linkpc.net/7097095091092093/The-Anatomy-of-Type-by-Stephen-Coles.pdf
    • http://loaminoo.linkpc.net/5099093099093099/The-Anatomy-of-a-Late-Negociation-by-J-Wilkie.pdf
    • http://loaminoo.linkpc.net/40930950910960

Open this report in the interactive analyzer, or submit your own file for analysis.