Malicious PDF — malware analysis report

Static analysis result for SHA-256 d91bd1ce2a39d7e4…

MALICIOUS

PDF

22.7 KB Created: 2019-05-02 18:40:00 +01:00 Authoring application: mPDF 5.7
MD5: 6ad187c95013cafa86c21da40d2f6619 SHA-1: 326692c463ddc06050ee5837ab1f503826e8f0ba SHA-256: d91bd1ce2a39d7e48cabb86cebe48393043bfc5ae418bb378841d7d55a9d19f9
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF contains a large number of embedded URLs, as indicated by the PDF_SEO_LINK_FARM heuristic. While many of these URLs point to benign content, the sheer volume and the nature of the heuristic suggest a malicious intent, possibly for SEO manipulation or to mask malicious redirects. The document body is heavily obfuscated, preventing a deeper analysis of its specific content or purpose beyond the link farm.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/2092091092093098/In-Other-Worlds-Science-Fiction-and-the-Human-Imagination-by-Margaret-Atwood.pdf
    • http://loaminoo.linkpc.net/9095097097099093/Margaret-Atwood-Feminism-and-Fiction-by-Fiona-Tolan.pdf
    • http://loaminoo.linkpc.net/3098095098096/The-Gothic-Imagination-Conversations-on-Fantasy-Horror-and-Science-Fiction-in-the-Media-by-John-C-Tibbetts.pdf
    • http://loaminoo.linkpc.net/2097094098094/IF-Worlds-of-Science-Fiction-1970-March-Volume-20-No-3-by-Ejler-Jakobsson.pdf
    • http://loaminoo.linkpc.net/2096096094095/Alternate-Worlds-The-Illustrated-History-of-Science-Fiction-by-James-E-Gunn.pdf
    • http://loaminoo.linkpc.net/2096095095091/Far-Horizons-All-New-Tales-from-the-Greatest-Worlds-of-Science-Fiction-by-Robert-Silverberg.pdf
    • http://loaminoo.linkpc.net/3097090092096091/Worlds-Apart-An-anthology-of-lesbian-and-gay-science-fiction-and-fantasy-by-Camilla-Decarnin.pdf
    • http://loaminoo.linkpc.net/1091099095091094095/Cat-s-Eye-Paperback-15-Feb-1990-by-Margaret-Atwood-by-Margaret-Atwood.pdf
    • http://loaminoo.linkpc.net/3092099091094099/Lifestyle-Mad-Science-Theory-amp-Fiction-by-Margaret-Killjoy.pdf
    • http://loaminoo.linkpc.net/4095097091099099/Science-Fiction-by-Gaslight-A-History-and-Anthology-of-Science-Fiction-in-the-Popular-Magazines-1891-1911-by-Sam-Moskowitz.pdf
    • http://loaminoo.linkpc.net/6099096092097097/The-First-Science-Fiction-MEGAPACK-25-Modern-and-Classic-Science-Fiction-Tales-by-Robert-Silverberg.pdf
    • http://loaminoo.linkpc.net/4095096090095097/Science-Fiction-for-People-Who-Hate-Science-Fiction-by-Terry-Carr.pdf
    • http://loaminoo.linkpc.net/9095097098098094/Erotica-Women-s-Writing-from-Sappho-to-Margaret-Atwood-by-Margaret-Reynolds.pdf
    • http://loaminoo.linkpc.net/2096090090095/Fantasy-amp-Science-Fiction-May-June-2014-The-Magazine-of-Fantasy-amp-Science-Fiction-713-by-Gordon-Van-Gelder.pdf
    • http://loaminoo.linkpc.net/3092097093090098/Space-Shuttles-Isaac-Asimov-s-Wonderful-Worlds-of-Science-Fiction-7-by-Isaac-Asimov.pdf
    • http://loaminoo.linkpc.net/7092097092092093/History-Fiction-or-Science-The-dynastic-parallelism-method-Rome-Troy-Greece-The-Bible-Chronological-shifts-New-Chronology-Vol-2-History-Fiction-or-Science-Chronology-by-Anatoly-Fomenko.pdf
    • http://loaminoo.linkpc.net/2094098099094/Asimov-s-Science-Fiction-February-1999-Asimov-s-Science-Fiction-277-by-Gardner-Dozois.pdf
    • http://loaminoo.linkpc.net/2096096095096/The-Science-Fiction-Hall-of-Fame-Volume-One-1929-1964-Science-Fiction-Hall-of-Fame-1-by-Robert-Silverberg.pdf
    • http://loaminoo.linkpc.net/2091097094090091/The-Parisian-Worlds-of-Frederic-Chopin-by-William-G-Atwood.pdf
    • http://loaminoo.linkpc.net/1091098091099097090/The-Magazine-of-Fantasy-amp-Science-Fiction-July-1989-The-Magazine-of-Fantasy-amp-Science-Fiction-458-by-Edward-L-Ferman.pdf