Malicious PDF — malware analysis report

Static analysis result for SHA-256 db1f2943424893d2…

MALICIOUS

PDF

20.7 KB Created: 2019-04-30 04:43:19 +01:00 Authoring application: mPDF 5.7
MD5: 95d98509c51973e5036301d2b9e3681e SHA-1: e2faa6886ebc7bea7e7baff88ac1e1500eb77543 SHA-256: db1f2943424893d2128b73d6e669af87b1e3277e915d5d2b9bcd89111e591cac
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF document contains a large number of embedded URLs, identified by the PDF_SEO_LINK_FARM heuristic. These links likely serve as a lure to direct users to malicious websites. No scripts were extracted from this sample. The primary attack vector appears to be social engineering through link farms.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://xiixmcuin.linkpc.net/4206200200201203/The-Gunpowder-Gardens-or-A-Time-For-Tea-Travels-Through-China-and-India-in-Search-of-Tea-by-Jason-Goodwin.pdf
    • http://xiixmcuin.linkpc.net/4203206204204207/A-Time-For-Tea-Travels-Through-China-and-India-in-Search-of-Tea-by-Jason-Goodwin.pdf
    • http://xiixmcuin.linkpc.net/1206203209207/The-Janissary-Tree-by-Jason-Goodwin.pdf
    • http://xiixmcuin.linkpc.net/1203202203206205/An-Evil-Eye-Yashim-the-Eunuch-4-by-Jason-Goodwin.pdf
    • http://xiixmcuin.linkpc.net/7201208209207207/Garden-Anywhere-How-to-grow-gorgeous-container-gardens-herb-gardens-kitchen-gardens-and-more-without-spending-a-fortune-by-Alys-Fowler.pdf
    • http://xiixmcuin.linkpc.net/1204206208207203/On-Foot-to-the-Golden-Horn-A-Walk-to-Istanbul-by-Jason-Goodwin.pdf
    • http://xiixmcuin.linkpc.net/1204202201207208/In-Search-of-Our-Mothers-Gardens-Womanist-Prose-by-Alice-Walker.pdf
    • http://xiixmcuin.linkpc.net/1205209207203202/Barbarian-Lost-Travels-in-the-New-China-by-Alexandre-Trudeau.pdf
    • http://xiixmcuin.linkpc.net/6200206201203200/India-s-China-War-by-Neville-Maxwell.pdf
    • http://xiixmcuin.linkpc.net/8202204208207/Travels-with-Charley-In-Search-of-America-by-John-Steinbeck.pdf
    • http://xiixmcuin.linkpc.net/4203206204204205/An-Unexpected-Light---Travels-In-Afghanistan-by-Jason-Elliot.pdf
    • http://xiixmcuin.linkpc.net/4203207205207202/Travels-with-Judy-In-Search-of-Steinbeck-s-America-by-Vicki-Cain.pdf
    • http://xiixmcuin.linkpc.net/3200204201204200/I-Have-Seen-the-World-Begin-Travels-through-China-Cambodia-and-Vietnam-by-Carsten-Jensen.pdf
    • http://xiixmcuin.linkpc.net/9201203208207209/No-Ordinary-Time-by-Doris-Kearns-Goodwin-by-BookRags.pdf
    • http://xiixmcuin.linkpc.net/9208203204204200/This-Brave-New-World-India-China-and-the-United-States-by-Anja-Manuel.pdf
    • http://xiixmcuin.linkpc.net/8200201202208/A-Season-with-Verona-Travels-Around-Italy-in-Search-of-Illusion-National-Character-and-Goals-by-Tim-Parks.pdf
    • http://xiixmcuin.linkpc.net/3206201202208/Time-Regained-In-Search-of-Lost-Time-7-by-Marcel-Proust.pdf
    • http://xiixmcuin.linkpc.net/5200205201206208/North-The-Tale-of-a-Boy-Who-Becomes-a-Free-Agent-and-Travels-the-World-in-Search-of-the-Perfect-Parents-by-Alan-Zweibel.pdf
    • http://xiixmcuin.linkpc.net/2208202209202/Asian-Ideas-of-East-And-West-Tagore-And-His-Critics-In-Japan-China-And-India-by-Stephen-N-Hay.pdf
    • http://xiixmcuin.linkpc.net/3204200202201202/Wrestling-the-Dragon-In-Search-of-the-Boy-Lama-Who-Defied-China-by-Gaby-Naher.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.