Malicious PDF — malware analysis report

Static analysis result for SHA-256 dcf4561538fcf12d…

MALICIOUS

PDF

15.5 KB Created: 2019-04-30 02:04:33 +01:00 Authoring application: mPDF 5.7
MD5: 4c1f4a7641684cb7464888fe2f5112da SHA-1: 0642f43a5dabd87bf3c46053d696e265d6ed024f SHA-256: dcf4561538fcf12d0ed223a215db93d8c9c1464933607de248eb1e90d25874ea
60 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell

The PDF file contains a large number of embedded links pointing to external PDF files hosted on the domain 'loaminoo.linkpc.net'. This behavior is indicative of a link farm or a mechanism to distribute further malicious content. While no scripts were extracted, the PDF structure itself suggests an attempt to redirect users to potentially harmful resources.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/1091096096097092098/The-Evil-One-by-J-N-Williamson.pdf
    • http://loaminoo.linkpc.net/1090099091098090/Love-Evil-To-whom-my-heart-falls-prey-by-Wendy-Williamson.pdf
    • http://loaminoo.linkpc.net/1091096096095099090/J-N-Williamson-s-Masques-2-by-J-N-Williamson.pdf
    • http://loaminoo.linkpc.net/1091097093092092093/Marianne-Williamson-on-Death-Dying-by-Marianne-Williamson.pdf
    • http://loaminoo.linkpc.net/1091097093092092092/Marianne-Williamson-on-Hope-and-Happiness-by-Marianne-Williamson.pdf
    • http://loaminoo.linkpc.net/7099092091099/Touching-Evil-Bishop-Special-Crimes-Unit-4-Evil-1-by-Kay-Hooper.pdf
    • http://loaminoo.linkpc.net/1090090093094096098/Furcht-soll-Dich-begleiten-Fear-No-Evil-No-Evil-Trilogy-3-by-Allison-Brennan.pdf
    • http://loaminoo.linkpc.net/4092090093097/The-Evil-Hobo-The-Evil-Company-Volume-1-by-Kenneth-White.pdf
    • http://loaminoo.linkpc.net/1090096099098094099/Hear-No-Evil-Speak-No-Evil-Delicious-2-by-Isabella-Kruger.pdf
    • http://loaminoo.linkpc.net/4093094094090090/Speak-No-Evil-No-Evil-Trilogy-1-by-Allison-Brennan.pdf
    • http://loaminoo.linkpc.net/2094096097092092/Fear-No-Evil-No-Evil-Trilogy-3-by-Allison-Brennan.pdf
    • http://loaminoo.linkpc.net/1096093096091090/Just-Evil-Evil-Secrets-Trilogy-1-by-Vickie-McKeehan.pdf
    • http://loaminoo.linkpc.net/2092099098092093/Seeing-Evil-Cycle-of-Evil-1-by-Jason-Parent.pdf
    • http://loaminoo.linkpc.net/1091097093090099092/Marianne-Williamson-on-Simplicity-by-Marianne-Williamson.pdf
    • http://loaminoo.linkpc.net/9090098095091093/Marianne-Williamson-on-Self-Esteem-by-Marianne-Williamson.pdf
    • http://loaminoo.linkpc.net/9090098095091092/Marianne-Williamson-On-Miracles-by-Marianne-Williamson.pdf
    • http://loaminoo.linkpc.net/1091097093090098097/Marianne-Williamson-on-Communication-by-Marianne-Williamson.pdf
    • http://loaminoo.linkpc.net/1091097093090099093/Marianne-Williamson-On-Commitment-by-Marianne-Williamson.pdf
    • http://loaminoo.linkpc.net/9090098096094092/Marianne-Williamson-on-Success-by-Marianne-Williamson.pdf
    • http://loaminoo.linkpc.net/7097097098091090/The-School-for-Good-and-Evil-B-amp-N-Exclusive-Edition-The-School-for-Good-and-Evil-Series-1-by-Iacopo-Bruno-Illustrator-Soman-Chainani.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.