Malicious PDF — malware analysis report

Static analysis result for SHA-256 e015f0e8234670ec…

MALICIOUS

PDF

16.1 KB Created: 2019-05-01 19:49:04 +01:00 Authoring application: mPDF 5.7
MD5: 4d242d02c7aa43e4001955c4b740bc35 SHA-1: eba2e2fb1e93b277605eb218973924d73682f651 SHA-256: e015f0e8234670ecce313667b99bcc9dfe148ab9cc2b928f99cb0074246414ee
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF document contains a large number of embedded links, identified by the PDF_SEO_LINK_FARM heuristic. These links point to various book titles hosted on loaminoo.linkpc.net. While the URLs themselves are currently flagged as benign, the sheer volume and structure suggest a potential link farm for SEO manipulation or to distribute further malicious content. No scripts were extracted from this sample.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/1097092092095097/The-Baby-Bargain-Once-a-Marine-1-by-Jennifer-Apodaca.pdf
    • http://loaminoo.linkpc.net/1091094097093/Her-Temporary-Hero-Once-a-Marine-2-by-Jennifer-Apodaca.pdf
    • http://loaminoo.linkpc.net/1090096097092096096/The-Baby-Bargain-by-Dallas-Schulze.pdf
    • http://loaminoo.linkpc.net/4098098097097098/The-Secret-Baby-Bargain-by-Melanie-Milburne.pdf
    • http://loaminoo.linkpc.net/5096090091091092/Billion-Dollar-Baby-Bargain-by-Tessa-Radley.pdf
    • http://loaminoo.linkpc.net/3096090091090094/The-Sicilian-s-Baby-Bargain-Leopardi-Brothers-3-by-Penny-Jordan.pdf
    • http://loaminoo.linkpc.net/1091096093098098099/Oceanside-Marine-Kendalls-4-by-Jennifer-Ann.pdf
    • http://loaminoo.linkpc.net/7092098099093091/The-Greek-Tycoon-s-Baby-Bargain-Greek-Billionaires-Brides-1-by-Sharon-Kendrick.pdf
    • http://loaminoo.linkpc.net/5096090092099097/Billion-Dollar-Baby-Bargain-The-Moretti-Arrangement-The-Moretti-Legacy-3-by-Tessa-Radley.pdf
    • http://loaminoo.linkpc.net/4097096094097097/Inside-Marine-One-Four-U-S-Presidents-One-Proud-Marine-and-the-World-s-Most-Amazing-Helicopter-by-Ray-L-39-Heureux.pdf
    • http://loaminoo.linkpc.net/2092095090096099/A-Candle-for-a-Marine-Always-a-Marine-18-by-Heather-Long.pdf
    • http://loaminoo.linkpc.net/3099096093092097/Marine-With-Benefits-Always-a-Marine-16-by-Heather-Long.pdf
    • http://loaminoo.linkpc.net/3091092097093097/Baby-Animals-by-Jennifer-Quasha.pdf
    • http://loaminoo.linkpc.net/1091097096092/Baby-It-s-Cold-Outside-by-Jennifer-Greene.pdf
    • http://loaminoo.linkpc.net/2091093094097098/Baby-Not-on-Board-A-Celebration-of-Life-Without-Kids-by-Jennifer-L-Shawne.pdf
    • http://loaminoo.linkpc.net/2095090092098095/The-Prince-s-Secret-Baby-Royal-House-of-Leone-3-by-Jennifer-Lewis.pdf
    • http://loaminoo.linkpc.net/1090095092093097097/A-Baby-of-His-Own-Harlequin-Medical-Romance-265-Bachelor-Dads-by-Jennifer-Taylor.pdf
    • http://loaminoo.linkpc.net/4098096098093091/Baby-It-s-Cold-Outside-Blame-It-On-The-Blizzard-Deep-Freeze-Melting-Point-by-Jennifer-Greene.pdf
    • http://loaminoo.linkpc.net/2090092099091093/The-Spaniard-s-Marriage-Bargain-The-Marriage-Bargain-1-by-Abby-Green.pdf
    • http://loaminoo.linkpc.net/6098094099093099/Warfighting-Marine-Corps-Doctrinal-Publication-1-by-U-S-Marine-Corps.pdf
    • http://loaminoo.linkpc.net/4097096094097097/Inside-Marine-One-Four-U-S-Presidents-O

Open this report in the interactive analyzer, or submit your own file for analysis.