Malicious PDF — malware analysis report

Static analysis result for SHA-256 d6472495986e22d5…

MALICIOUS

PDF

23.9 KB Created: 2020-03-18 22:27:36 +00:00 Authoring application: mPDF 5.7
MD5: 6d79a7f96da683ae95f3155040991114 SHA-1: c506952d832423a77d7adff515592d40141aa4a8 SHA-256: d6472495986e22d524f6a746118abe517f86f5903b01ffb138b2535d6f2cbd8c
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF file contains a heuristic firing for PDF_SEO_LINK_FARM, indicating a large number of embedded links. These links all point to the same domain, 'easckaolp.myhome.cx', and appear to be disguised as book titles. The embedded URL heuristic also fired. The primary attack pattern is likely to lure users into clicking these links, which could lead to malware downloads or phishing. No scripts were extracted from this sample.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://easckaolp.myhome.cx/1849846845849843/High-Road-to-Tibet-Travels-in-China-Tibet-Nepal-and-India-by-John-Dwyer.pdf
    • http://easckaolp.myhome.cx/5840848842845841/Himalayan-Passage-Seven-Months-in-the-High-Country-of-Tibet-Nepal-China-India-amp-Pakistan-by-Jeremy-Schmidt.pdf
    • http://easckaolp.myhome.cx/8848843842847/The-High-Road-to-China-George-Bogle-the-Panchen-Lama-and-the-First-British-Expedition-to-Tibet-by-Kate-Teltscher.pdf
    • http://easckaolp.myhome.cx/4843848844842842/Mountains-of-the-Middle-Kingdom-Exploring-the-High-Peaks-of-China-and-Tibet-by-Galen-A-Rowell.pdf
    • http://easckaolp.myhome.cx/2842841845845845/The-Paper-Road-Archive-and-Experience-in-the-Botanical-Exploration-of-West-China-and-Tibet-by-Erik-Mueggler.pdf
    • http://easckaolp.myhome.cx/1840841841847848848/Zeven-jaar-in-Tibet-Terug-naar-Tibet-by-Heinrich-Harrer.pdf
    • http://easckaolp.myhome.cx/9843847844842840/Gewebte-Bilder-Entr-tselte-Motive-Woven-Images-Unravelled-Motifs-Doppelseitige-Brettchengewebe-aus-Birma-Tibet-und-Tunesien-Double-faced-tablet-woven-bands-from-Burma-Tibet-and-Tunisia-by-Otfried-Staudigel.pdf
    • http://easckaolp.myhome.cx/1840841847844846/Hell-or-High-Water-Surviving-Tibet-s-Tsangpo-River-by-Peter-Heller.pdf
    • http://easckaolp.myhome.cx/8842847840847848/Antiquites-of-Northern-Tibet-by-John-Vincent-Bellezza.pdf
    • http://easckaolp.myhome.cx/1840847848840841845/Wander-Reiten-um-die-Welt-Oskar-reitet-in-Indien-Tibet-China-T-rkei-Nord-und-S-damerika-by-Manuel-Sauda-Sauda-Manuel.pdf
    • http://easckaolp.myhome.cx/5848845849846846/Inner-Asia-A-Collection-of-Travel-Stories-from-the-Indian-Subcontinent-India-Nepal-Bhutan-Sri-Lanka---25-India-Travel-Stories-India-Travelogue-by-Kiva-Bottero.pdf
    • http://easckaolp.myhome.cx/6847843843845/Tibet-Through-the-Red-Box-by-Peter-S-s.pdf
    • http://easckaolp.myhome.cx/7840842842841/Tibet-Through-the-Red-Box-by-Peter-S-s.pdf
    • http://easckaolp.myhome.cx/3846847849842841/The-House-Tibet-by-Georgia-Savage.pdf
    • http://easckaolp.myhome.cx/2849846843847/To-a-Mountain-in-Tibet-by-Colin-Thubron.pdf
    • http://easckaolp.myhome.cx/9842845845849844/Race-to-Tibet-by-Sophie-Schiller.pdf
    • http://easckaolp.myhome.cx/1840843846840849847/Journey-to-Lhasa-in-Tibet-by-Brian-Lawrenson.pdf
    • http://easckaolp.myhome.cx/7840847847846841/Monk-Dancers-of-Tibet-by-Matthieu-Ricard.pdf
    • http://easckaolp.myhome.cx/2840844841843845/Magic-and-Mystery-in-Tibet-by-Alexandra-David-N-el.pdf
    • http://easckaolp.myhome.cx/3843843840845840/Initiations-and-Initiates-in-Tibet-by-Alexandra-David-N-el.pdf
    • http://easckaolp.myhome.cx/2842841845845845/The-Paper-Road-Archive-and-Experience-in-the-Botanical-Exploration-of-West-China-and-Tibet-by-Eri