Malicious PDF — malware analysis report

Static analysis result for SHA-256 d69ce06f9998670f…

MALICIOUS

PDF

13.0 KB Created: 2019-05-02 02:41:56 +01:00 Authoring application: mPDF 5.7
MD5: 6de97080e53a6c232b6fc81101a12cd9 SHA-1: 892c8d90db7961fc54efdc9c8cbb1bd6a018b367 SHA-256: d69ce06f9998670f8fff0702f1fb083b61b13836d4321a3976a80c70a666a379
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF file contains a large number of embedded external links, a technique often used for SEO manipulation or to distribute malicious content. The heuristic 'PDF_SEO_LINK_FARM' specifically flags this behavior, indicating a potential attempt to lure users to external sites. While the URLs themselves are currently marked as benign, the sheer volume and structure suggest a malicious intent to redirect users. No scripts were extracted from this sample.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/2096096098092092/The-Stranger-by-Saskia-Sarginson.pdf
    • http://loaminoo.linkpc.net/3092095092095095/Rampant-by-Saskia-Walker.pdf
    • http://loaminoo.linkpc.net/2095092097095099/Zin-in-zonde-by-Saskia-Hope.pdf
    • http://loaminoo.linkpc.net/7090095092091095/Minding-Amy-by-Saskia-Walker.pdf
    • http://loaminoo.linkpc.net/2095099098090096/Sorceress-by-Saskia-Walker.pdf
    • http://loaminoo.linkpc.net/9096093099090090/Das-silberne-Haus-by-Saskia-M-Tonoch.pdf
    • http://loaminoo.linkpc.net/7090095092091094/Noah-amp-Saskia-by-Chris-Anastassiades.pdf
    • http://loaminoo.linkpc.net/5090098093094094/Double-Dare-by-Saskia-Walker.pdf
    • http://loaminoo.linkpc.net/7090095092094094/Globalization-and-Its-Discontents-by-Saskia-Sassen.pdf
    • http://loaminoo.linkpc.net/1090098094098098094/Coming-out-Band-3-by-Saskia-Pasi-n.pdf
    • http://loaminoo.linkpc.net/2099095094097091/Secrets-Volume-12-by-Saskia-Walker.pdf
    • http://loaminoo.linkpc.net/4092095092098096/The-Harlot-Taskill-Witches-1-by-Saskia-Walker.pdf
    • http://loaminoo.linkpc.net/2095094093094093/D-j-Vu-A-Technothriller-Saskia-Brandt-1-by-Ian-Hocking.pdf
    • http://loaminoo.linkpc.net/7090095091098095/The-Amber-Rooms-Saskia-Brandt-3-by-Ian-Hocking.pdf
    • http://loaminoo.linkpc.net/7090095092092096/Holly-s-Intuition-Erogenous-Zones-2-by-Saskia-Walker.pdf
    • http://loaminoo.linkpc.net/2095098094096093/Eden-Forest-Saskia-Trilogy-1-by-Aoife-Marie-Sheridan.pdf
    • http://loaminoo.linkpc.net/7090095092093092/The-Global-City-New-York-London-Tokyo-by-Saskia-Sassen.pdf
    • http://loaminoo.linkpc.net/7090095091098098/The-Rise-of-the-Queen-Saskia-Trilogy-3-by-Aoife-Marie-Sheridan.pdf
    • http://loaminoo.linkpc.net/2094099090094092/City-of-Secrets-Saskia-Trilogy-2-by-Aoife-Marie-Sheridan.pdf
    • http://loaminoo.linkpc.net/9094097092098094/Bruxelles-Colonie-D-Artistes-Peintres-Hollandais-1850-1890-by-Saskia-De-Bodt.pdf
    • http://loaminoo.linkpc.net/7090095091098095/The-Amber-Rooms-Saskia-Bran

Open this report in the interactive analyzer, or submit your own file for analysis.