Malicious PDF — malware analysis report

Static analysis result for SHA-256 e89da0afea36d517…

MALICIOUS

PDF

21.7 KB Created: 2019-04-30 03:16:08 +01:00 Authoring application: mPDF 5.7
MD5: 87eea9a830fc4cb949a6b196895faa0a SHA-1: 2b7eacf4c439f654a22123081c428ed0fd72dab4 SHA-256: e89da0afea36d517a903dea1639057fa39c493fe7452003d525ae4050f3063bb
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF document was flagged for containing a large number of embedded external links, a technique often used for SEO poisoning or to redirect users to malicious websites. While the document body is heavily obfuscated and unreadable, the heuristic firings strongly suggest a malicious intent to lure users through these links. No scripts were extracted from this sample.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/1091094098090099092/Tini-Time-The-Martini-Mike-Guide-to-Martinis-by-Michael-P-D-39-Arco.pdf
    • http://loaminoo.linkpc.net/3093099096097090/What-I-Found-in-a-Thousand-Towns-A-Traveling-Musician-s-Guide-to-Rebuilding-America-s-Communities-One-Coffee-Shop-Dog-Run-and-Open-Mike-Night-at-a-Time-by-Dar-Williams.pdf
    • http://loaminoo.linkpc.net/3099099096090093/The-Three-Martini-Playdate-A-Practical-Guide-to-Happy-Parenting-by-Christie-Mellor.pdf
    • http://loaminoo.linkpc.net/1098091094091/Musichound-Lounge-The-Essential-Album-Guide-to-Martini-Music-and-Easy-Listening-by-Steve-Knopper.pdf
    • http://loaminoo.linkpc.net/8091096098092090/A-Time-to-Mourn-a-Time-to-Comfort-2nd-Edition-A-Guide-to-Jewish-Bereavement-by-Ron-Wolfson.pdf
    • http://loaminoo.linkpc.net/7093093093098094/Maximize-Your-Time-A-Progressive-Guide-For-Time-Management-And-Organizational-Skills-by-Rohit-Uniyal.pdf
    • http://loaminoo.linkpc.net/4094098095095099/Time-Travel-and-Warp-Drives-A-Scientific-Guide-to-Shortcuts-through-Time-and-Space-by-Allen-Everett.pdf
    • http://loaminoo.linkpc.net/7099096096091098/Jit-Implementation-Manual----The-Complete-Guide-to-Just-In-Time-Manufacturing-Volume-1----The-Just-In-Time-Production-System-by-Hiroyuki-Hirano.pdf
    • http://loaminoo.linkpc.net/1091095091092092099/The-Lipstick-Mystic-s-Guide-to-Time-Traveling-Healing-the-Time-Body-and-Finding-the-Best-Possible-Timeline-by-Jennifer-Shepherd.pdf
    • http://loaminoo.linkpc.net/9097093099095095/30-Dirty-Martinis-by-Derek-Adam.pdf
    • http://loaminoo.linkpc.net/2099090095096098/21-Dog-Years-Doing-Time-At-Amazon-Com-by-Mike-Daisey.pdf
    • http://loaminoo.linkpc.net/2098093099093096/Martinis-with-the-Devil-Zyan-Star-Book-1-by-A-A-Chamberlynn.pdf
    • http://loaminoo.linkpc.net/9097092095095097/Secret-of-the-Time-Tablets-Cleopatra-in-Space-3-by-Mike-Maihack.pdf
    • http://loaminoo.linkpc.net/5097099094090096/The-Slayer-s-Guide-To-Troglodytes-by-Mike-Major.pdf
    • http://loaminoo.linkpc.net/1091094098091091094/Poseidon-IX-by-Tini-Howard.pdf
    • http://loaminoo.linkpc.net/9098092094093096/Markus-Schinwald-by-Agnes-Husslein-Arco.pdf
    • http://loaminoo.linkpc.net/1090094091091096091/Healing-Power-of-Pau-d-Arco-by-Walter-L-beck.pdf
    • http://loaminoo.linkpc.net/7091092099092090/Secrets-of-Castillo-del-Arco-by-Trish-Morey.pdf
    • http://loaminoo.linkpc.net/1090099094094092095/The-Hunt-Mike-Greystone-Book-1-by-Michael-Sigurdsson.pdf
    • http://loaminoo.linkpc.net/1090099094094092094/The-Doctor-Mike-Greystone-Book-2-by-Michael-Sigurdsson.pdf
    • http://loaminoo.linkpc.net/8091096098092090/A-Time-to-Mou

Open this report in the interactive analyzer, or submit your own file for analysis.