Malicious PDF — malware analysis report

Static analysis result for SHA-256 d7cdb67ff66c2bc0…

MALICIOUS

PDF

22.8 KB Created: 2019-04-29 23:09:20 +01:00 Authoring application: mPDF 5.7
MD5: 3bdee38dec47ba8d307398f8f0d4954c SHA-1: 8398a18a4194902df72d5e19eb255d747fb115fc SHA-256: d7cdb67ff66c2bc0ae38cefbc82b823b304695b5cee1f3fb479d866bdd8c726f
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Phishing: Spearphishing Attachment T1059.001 Command and Scripting Interpreter: PowerShell

The PDF file contains a significant number of embedded URLs, identified by the PDF_SEO_LINK_FARM heuristic. These URLs are structured with numeric slugs and book titles, suggesting an attempt to create a link farm. While the URLs themselves are currently marked as benign, the sheer volume and structure indicate a malicious intent, likely for SEO manipulation or to serve as a redirector to malicious content. No scripts were extracted from this sample.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/4094090093096093/The-Billionaire-s-Stray-Heart-Burke-Billionaire-Romance-Book-2-by-Rachelle-J-Christensen.pdf
    • http://loaminoo.linkpc.net/2098091099092091/The-Billionaire-s-Passion-The-Billionaire-s-Kiss-Book-Four-A-Billionaire-Alpha-Romance-by-Olivia-Thorne.pdf
    • http://loaminoo.linkpc.net/1094097092091099/Billionaire-Romance-Billionaire-A-Sizzling-Hot-Billionaire-Romance-Boxed-Set-Collection-by-J-L-Ryan.pdf
    • http://loaminoo.linkpc.net/4094093095090092/The-Billionaire-s-Desire-A-Single-Dad-Romance-The-Billionaire-s-Touch-Book-4-by-L-N-Pearl.pdf
    • http://loaminoo.linkpc.net/4094090096098094/The-Billionaire-s-Bodyguard-Clean-Billionaire-Beach-Club-Romance-Book-5-by-Elana-Johnson.pdf
    • http://loaminoo.linkpc.net/4094090097099096/The-Bashful-Billionaire-Clean-Billionaire-Beach-Club-Romance-Book-3-by-Elana-Johnson.pdf
    • http://loaminoo.linkpc.net/4094090096098098/The-Brazen-Billionaire-Clean-Billionaire-Beach-Club-Romance-Book-4-by-Elana-Johnson.pdf
    • http://loaminoo.linkpc.net/4094090096099093/Mending-Images-with-the-Billionaire-A-Clean-Billionaire-Romance-Artists-amp-Billionaires-Book-4-by-Lorin-Grace.pdf
    • http://loaminoo.linkpc.net/4094090098095090/The-Princess-Bride-of-Riodan-Echo-Ridge-Romance-Book-3-by-Rachelle-J-Christensen.pdf
    • http://loaminoo.linkpc.net/1094097091092092/Billionaire-Romance-Complete-Series-Alpha-Male-Romances-Suspenseful-Alpha-Male-Billionaire-Bad-Boy-Romance-Billionaire-Series-by-J-L-Ryan.pdf
    • http://loaminoo.linkpc.net/2097093099090098/The-Reclusive-Billionaire-Destination-Billionaire-Romance-1-by-Lucy-McConnell.pdf
    • http://loaminoo.linkpc.net/3091096095095095/Noah-s-Rise-Bad-Boy-Military-Romance-A-Billionaire-Romance-Book-3-by-M-P-Lodi.pdf
    • http://loaminoo.linkpc.net/4097094091/The-Billionaire-s-Christmas-Virgin-Prelude-to-Billionaire-Unknown---Blake-The-Billionaire-s-Obsession-9-5-by-J-S-Scott.pdf
    • http://loaminoo.linkpc.net/1092093096091090/Heart-of-the-Billionaire-Sam-The-Billionaire-s-Obsession-2-by-J-S-Scott.pdf
    • http://loaminoo.linkpc.net/5098092093098/Romance-Box-Set-Billionaire-Romance-Feel-The-Music-Books-1-3-Music-in-his-Bones-Soul-and-Heart-by-Amerine-Graham.pdf
    • http://loaminoo.linkpc.net/4095096098097091/ROMANCE-CONTEMPORARY-ROMANCE-Bounty-and-the-Beast-Billionaire-Bad-Boy-Heroine-Mystery-Romance-Contemporary-Mystery-and-Suspense-Mafia-Romance-Book-2-by-Portia-Paige.pdf
    • http://loaminoo.linkpc.net/4094090098090096/The-Billionaire-Love-Match-The-Billionaire-Surprise-Book-1-by-Emma-St-Clair.pdf
    • http://loaminoo.linkpc.net/8091097091097091/Taken-Billionaire-Encounter-Romance-Book-1-by-Kristina-Royer.pdf
    • http://loaminoo.linkpc.net/8091097092094092/Loved-Billionaire-Encounter-Romance-Book-3-by-Kristina-Royer.pdf
    • http://loaminoo.linkpc.net/6099098091097093/Liberating-Mr-Gable-A-Billionaire-Romance-The-Liberated-Series-Book-2-by-Sophia-Derobe.pdf
    • http://loaminoo.linkpc.net/40940

Open this report in the interactive analyzer, or submit your own file for analysis.