Malicious PDF — malware analysis report

Static analysis result for SHA-256 e5f04bddae5d5747…

MALICIOUS

PDF

36.7 KB Created: 2019-05-01 18:25:34 +01:00 Authoring application: mPDF 5.7
MD5: 6d5b56b06d82a2bedb0d0f0b316add78 SHA-1: e61c88e84285a2262660d61763e0c7aa2535b535 SHA-256: e5f04bddae5d5747d965373415f93b69d6bb3fc4933a23e39b82c5a37aa7dec0
60 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell

The PDF file contains a large number of embedded URLs, identified by the PDF_SEO_LINK_FARM heuristic. These URLs point to various academic-sounding documents hosted on the 'loaminoo.linkpc.net' domain. While the document body itself is heavily obfuscated, the presence of numerous external links suggests a tactic to manipulate search engine results or to distribute further malicious content. No scripts were extracted from this sample.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/1091093095094093097/Transducers-01-Eurosensors-XV-The-11th-International-Conference-on-Solid-State-Sensors-and-Actuators-June-10-14-2001-Munich-Germany-by-Ernst-Obermeier.pdf
    • http://loaminoo.linkpc.net/8097097095094096/Stochastic-Algorithms-Foundations-And-Applications-International-Symposium-Saga-2001-Berlin-Germany-December-13-14-2001-Proceedings-Lecture-Notes-In-Computer-Science-by-Kathleen-Steinh-fel.pdf
    • http://loaminoo.linkpc.net/7093092098093096/Compliant-Actuators-and-Sensors-Flexible-Mechanics-for-Applications-in-Robotics-by-Lena-Zentner.pdf
    • http://loaminoo.linkpc.net/7093090094090096/Physics-of-Rotating-Fluids-Selected-Topics-of-the-11th-International-Couette-Taylor-Workshop-Held-at-Bremen-Germany-20-23-July-1999-by-R-Beig.pdf
    • http://loaminoo.linkpc.net/7093090094090093/Physics-of-Rotating-Fluids-Selected-Topics-of-the-11th-International-Couette-Taylor-Workshop-Held-at-Bremen-Germany-20-23-July-1999-by-Christoph-Egbers.pdf
    • http://loaminoo.linkpc.net/6090096096093094/The-Semantic-Web-Trends-and-Challenges-11th-International-Conference-Eswc-2014-Anissaras-Crete-Greece-May-25-29-2014-Proceedings-by-Valentina-Presutti.pdf
    • http://loaminoo.linkpc.net/8091090090092091/New-Trains-International-Conference-4-5-June-2003-at-Le-Meridien-York-UK-by-Professional-Engineering-Publishers.pdf
    • http://loaminoo.linkpc.net/7091096095096098/Artificial-Intelligence-and-Soft-Computing-11th-International-Conference-Icaisa-2012-Zakopane-Poland-April-29---3-May-2012-Proceedings-Part-I-by-Leszek-Rutkowski.pdf
    • http://loaminoo.linkpc.net/1090093096093090099/International-Conference-on-Mass-Media-Maps-Approaches--Results-Social-Impact-Proceedings-Berlin---June-19-21-1997-by-Wolfgang-Scharfe.pdf
    • http://loaminoo.linkpc.net/7095096094095095/Analog-Circuit-Design-Sensors-Actuators-and-Power-Drivers-Integrated-Power-Amplifiers-from-Wireline-to-Rf-Very-High-Frequency-Front-Ends-by-Herman-Casier.pdf
    • http://loaminoo.linkpc.net/5096098096093091/Autonomous-and-Intelligent-Systems-Third-International-Conference-AIS-2012-Aviero-Portugal-June-25-27-2012-Proceedings-by-Mohamed-Kamel.pdf
    • http://loaminoo.linkpc.net/7091096095092097/Artificial-Intelligence-and-Soft-Computing---Icaisc-2006-8th-International-Conference-Zakopane-Poland-June-25-29-2006-Proceedings-by-Leszek-Rutkowski.pdf
    • http://loaminoo.linkpc.net/7091096096092094/Artificial-Intelligence-and-Soft-Computing-16th-International-Conference-Icaisc-2017-Zakopane-Poland-June-11-15-2017-Part-II-by-Leszek-Rutkowski.pdf
    • http://loaminoo.linkpc.net/7091096096092099/Artificial-Intelligence-and-Soft-Computing-10th-International-Conference-ICAISC-2010-Zakopane-Poland-June-13-17-2010-Part-II-by-Leszek-Rutkowski.pdf
    • http://loaminoo.linkpc.net/7091096096095097/Artificial-Intelligence-and-Soft-Computing-16th-International-Conference-Icaisc-2017-Zakopane-Poland-June-11-15-2017-Part-I-by-Leszek-Rutkowski.pdf
    • http://loaminoo.linkpc.net/7091096096093093/Artificial-Intelligence-and-Soft-Computing-17th-International-Conference-Icaisc-2018-Zakopane-Poland-June-3-7-2018-Proceedings-Part-II-by-Leszek-Rutkowski.pdf
    • http://loaminoo.linkpc.net/7091096096093091/Artificial-Intelligence-and-Soft-Computing-13th-International-Conference-Icaisc-2014-Zakopane-Poland-June-1-5-2014-Proceedings-Part-I-by-Leszek-Rutkowski.pdf
    • http://loaminoo.linkpc.net/9099091091091097/The-Attacks-of-September-11th-2001-I-Survived-6-by-Lauren-Tarshis.pdf
    • http://loaminoo.linkpc.net/8099090094098093/Reliable-Software-Technologies---ADA-Europe-2009-14th-ADA-Europe-International-Conference-Brest-France-June-8-12-2009-Proceedings-by-Fabrice-Kordon.pdf
    • http://loaminoo.linkpc.net/8091094094098093/Materials-Science-and-Energy-Engineering-Cmsee-2014---Proceedings-of-the-2014-International-Conference-Proceedings-of-the-2014-International-Conference-by-Shyan-Lung-Chung.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.