Malicious PDF — malware analysis report

Static analysis result for SHA-256 dcf4fa89f732b1d1…

MALICIOUS

PDF

21.8 KB Created: 2019-05-02 18:32:19 +01:00 Authoring application: mPDF 5.7
MD5: 6613eb2b325af7c118701af498049770 SHA-1: 6366a090ee02d07c51e67b261fa09af786fd9bcc SHA-256: dcf4fa89f732b1d1d6e0b71472d1cef9bfd7ef82623a8822b8b0e4a82c7fc688
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF file exhibits a critical heuristic firing for a link farm, containing 27 external links. These links predominantly point to the 'loaminoo.linkpc.net' domain, disguised as academic book PDFs. While the URLs themselves are marked as benign, the sheer volume and deceptive nature of the links suggest a social engineering tactic to lure users to potentially malicious content or to manipulate search engine rankings. No scripts were extracted from this sample.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/1090090094099091093/The-Essential-World-History-Volume-II-Since-1500-by-William-J-Duiker.pdf
    • http://loaminoo.linkpc.net/1090090094096099094/The-Essential-World-History-Volume-II-Since-1500-by-William-J-Duiker.pdf
    • http://loaminoo.linkpc.net/1090090094096096098/The-Essential-World-History-by-William-J-Duiker.pdf
    • http://loaminoo.linkpc.net/1090090094098092099/Studyguide-for-the-Essential-World-History-by-Duiker-William-J-ISBN-9781305645363-by-Cram101-Textbook-Reviews.pdf
    • http://loaminoo.linkpc.net/1090090094098093095/Studyguide-for-the-Essential-World-History-by-Duiker-William-J-ISBN-9781305645356-by-Cram101-Textbook-Reviews.pdf
    • http://loaminoo.linkpc.net/1090090094099096095/Bundle-World-History-Volume-I-To-1800-Loose-leaf-Version-8th-LMS-Integrated-for-MindTap-History-1-term-6-months-Printed-Access-Card-by-William-J-Duiker.pdf
    • http://loaminoo.linkpc.net/1090090094098092092/The-Essential-World-History-by-Duiker-amp-Spielvogel.pdf
    • http://loaminoo.linkpc.net/1090090094099096094/S-G-World-History-V-I-To-1800-by-William-J-Duiker.pdf
    • http://loaminoo.linkpc.net/1090090094096099096/Essentials-of-World-History-Volume-II-by-Duiker.pdf
    • http://loaminoo.linkpc.net/1090090094097090092/Twentieth-Century-World-History-by-William-J-Duiker.pdf
    • http://loaminoo.linkpc.net/1090090094099097090/World-History-Complete-Paperback-7th-Edition-with-CourseMate-Access-Card-by-William-J-Duiker.pdf
    • http://loaminoo.linkpc.net/6093099093096/Volume-A-From-Antiquity-To-1500-Volume-of-McKay-A-History-of-World-Societies-by-John-P-McKay.pdf
    • http://loaminoo.linkpc.net/1090090094099097094/History-Unbound-by-William-J-Duiker.pdf
    • http://loaminoo.linkpc.net/8098097090098091/History-s-Greatest-Lies-The-Startling-Truths-Behind-World-Events-our-History-Books-Got-Wrong-by-William-Weir.pdf
    • http://loaminoo.linkpc.net/4098096099096098/World-History-Ancient-History-United-States-History-European-Native-American-Russian-Chinese-Asian-Indian-and-Australian-History-Wars-including-World-War-1-and-2-by-Adam-Brown.pdf
    • http://loaminoo.linkpc.net/1090090094096097094/The-Communist-Road-to-Power-in-Vietnam-by-William-J-Duiker.pdf
    • http://loaminoo.linkpc.net/1090090094096096095/Sacred-War-Nationalism-and-Revolution-in-a-Divided-Vietnam-by-William-J-Duiker.pdf
    • http://loaminoo.linkpc.net/1090090094099097092/The-Communist-Road-to-Power-in-Vietnam-Second-Edition-by-William-J-Duiker.pdf
    • http://loaminoo.linkpc.net/5098092095099093/The-History-of-Henrie-the-Fourth-Volume-1-by-William-Shakespeare.pdf
    • http://loaminoo.linkpc.net/1095098090092099/The-Well-At-The-World-s-End-Volume-I-by-William-Morris.pdf
    • http://loaminoo.linkpc.net/1090090094099096095/Bundle-World-History-Volume-I-To-1800-Loose-leaf-Version-8th-LMS-Integrated-for-MindTap-History-1-term-6-months-Printed-Access-Card-by-Willia