Malicious PDF — malware analysis report

Static analysis result for SHA-256 d48e32469be67c9c…

MALICIOUS

PDF

16.6 KB Created: 2019-05-07 04:21:30 +01:00 Authoring application: mPDF 5.7
MD5: ff851e33b044e3a7b4fd826d7ab8c2e5 SHA-1: c437c0e27643b944b69914d7cf6a41141a124446 SHA-256: d48e32469be67c9c904ffd93f7c90547dfa0aa0e5d28461a4bc360ab1a2b5ac1
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF contains a large number of embedded links, identified as a link farm. These links predominantly point to the 'loaminoo.linkpc.net' domain, suggesting a coordinated effort to direct users to external content. While the document body is unreadable, the heuristic firings strongly indicate a malicious intent to drive traffic to these URLs, likely for phishing or malware distribution.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/5090098098093/Darkest-Highlander-Dark-Sword-6-by-Donna-Grant.pdf
    • http://loaminoo.linkpc.net/1094095099098091/Wicked-Highlander-Dark-Sword-3-by-Donna-Grant.pdf
    • http://loaminoo.linkpc.net/3097097090099091/Shadow-Highlander-Dark-Sword-5-by-Donna-Grant.pdf
    • http://loaminoo.linkpc.net/3097097090098099/Untamed-Highlander-Dark-Sword-4-by-Donna-Grant.pdf
    • http://loaminoo.linkpc.net/1097093096097098/Dangerous-Highlander-Dark-Sword-1-by-Donna-Grant.pdf
    • http://loaminoo.linkpc.net/3090090099094096/Untamed-Highlander-by-Donna-Grant.pdf
    • http://loaminoo.linkpc.net/1091099096090090/Darkest-Flame-Part-1-by-Donna-Grant.pdf
    • http://loaminoo.linkpc.net/8094095093094099/Highlander-El-conjuro-olvidado-by-Donna-Grant.pdf
    • http://loaminoo.linkpc.net/3097097090098093/Hot-Blooded-Dark-Kings-4-by-Donna-Grant.pdf
    • http://loaminoo.linkpc.net/1093091092098096/Midnight-s-Seduction-Dark-Warriors-3-by-Donna-Grant.pdf
    • http://loaminoo.linkpc.net/1093091098096096/Midnight-s-Warrior-Dark-Warriors-4-by-Donna-Grant.pdf
    • http://loaminoo.linkpc.net/2093091093094093/Dark-Alpha-s-Demand-Reaper-3-by-Donna-Grant.pdf
    • http://loaminoo.linkpc.net/2099099093091094/The-Highlander-s-Bride-Highlander-Duo-2-by-Donna-Fletcher.pdf
    • http://loaminoo.linkpc.net/4094094091097099/The-Dark-Warrior-Series-The-Complete-Collection-Contains-Midnight-s-Master-Midnight-s-Lover-Midnight-s-Seduction-Midnight-s-Warrior-Midnight-s-Kiss-Surrender-novella-Dark-Warriors-by-Donna-Grant.pdf
    • http://loaminoo.linkpc.net/3095092092090093/The-Dark-Highlander-Highlander-5-by-Karen-Marie-Moning.pdf
    • http://loaminoo.linkpc.net/7097092098090/The-Book-of-the-Sword-The-Darkest-Age-2-by-A-J-Lake.pdf
    • http://loaminoo.linkpc.net/3094092090094096/Taken-By-Storm-Highlander-Duo-1-by-Donna-Fletcher.pdf
    • http://loaminoo.linkpc.net/3096096093091092/Rescued-by-a-Highlander-Clan-Grant-1-by-Keira-Montclair.pdf
    • http://loaminoo.linkpc.net/4091093096092/Claiming-the-Highlander-Brotherhood-of-the-Sword-2-MacAllister-1-by-Kinley-MacGregor.pdf
    • http://loaminoo.linkpc.net/2097099097093091/The-Highlander-s-Forbidden-Bride-Sinclare-Brothers-4-by-Donna-Fletcher.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.