Malicious PDF — malware analysis report

Static analysis result for SHA-256 f28d8b7bc811d2e8…

MALICIOUS

PDF

16.8 KB Created: 2020-02-13 19:52:48 +00:00 Authoring application: mPDF 5.7
MD5: ffda86a79765601cf76b29707e10eab8 SHA-1: 35cacbcc5c8bc68585589e3445ec19496d71f8f6 SHA-256: f28d8b7bc811d2e83a32c5e0bd58663e625486ab0244327fe7d7f163df16a303
60 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell

The PDF file contains a large number of embedded URLs pointing to external PDF documents on the domain kitasdyu.myhome.cx. This behavior is indicative of a link farm or a content distribution network for malicious files. The heuristic PDF_SEO_LINK_FARM specifically flags this pattern. No scripts were extracted, limiting the ability to determine further payload delivery or execution mechanisms.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://kitasdyu.myhome.cx/8875871873875870/The-Mills-amp-Boon-Modern-Girl-s-Guide-to-Growing-Old-Disgracefully-Mills-amp-Boon-A-Zs-Book-6-by-Ada-Adverse.pdf
    • http://kitasdyu.myhome.cx/2873872875870877/Fallen-Warrior-Fallen-Trilogy-book-3-by-Tess-Williams.pdf
    • http://kitasdyu.myhome.cx/2873873870878874/Fallen-Kingdom-Fallen-Trilogy-2-by-Tess-Williams.pdf
    • http://kitasdyu.myhome.cx/1874875873876878/The-Fallen-Series-Boxed-Set-Fallen-1-4-by-Lauren-Kate.pdf
    • http://kitasdyu.myhome.cx/3870878877879875/Sins-of-the-Fallen-Academy-of-the-Fallen-3-by-Daniele-Lanzarotta.pdf
    • http://kitasdyu.myhome.cx/8875871873874877/The-Mills-amp-Boon-Modern-Girl-s-Guide-to-Turning-into-Your-Mother-The-Perfect-Mother-s-Day-gift-for-mums-who-have-it-all-Mills-amp-Boon-A-Zs-Book-5-by-Ada-Adverse.pdf
    • http://kitasdyu.myhome.cx/7870878870876870/Fallen-in-Love-Fallen-3-5-by-Lauren-Kate.pdf
    • http://kitasdyu.myhome.cx/3872872877874/Fallen-Fallen-1-by-Lauren-Kate.pdf
    • http://kitasdyu.myhome.cx/6873875870878/Fallen-Fallen-1-by-Lauren-Kate.pdf
    • http://kitasdyu.myhome.cx/3875873876873872/Fallen-Fallen-1-by-Lauren-Kate.pdf
    • http://kitasdyu.myhome.cx/4877879879876871/Fallen-Crest-Extras-Fallen-Crest-High-7-5-by-Tijan.pdf
    • http://kitasdyu.myhome.cx/1871879875875873873/Slaves-of-a-Fallen-World-Fallen-World-3-by-Micki-Magee.pdf
    • http://kitasdyu.myhome.cx/1871879875875877872/Secrets-of-a-Fallen-World-Fallen-World-1-by-Micki-Magee.pdf
    • http://kitasdyu.myhome.cx/1874878875873875/Fallen-Crest-Public-Fallen-Crest-High-3-by-Tijan.pdf
    • http://kitasdyu.myhome.cx/1877870879872878/Fallen-Angel-Fallen-Angel-1-by-Tracie-Podger.pdf
    • http://kitasdyu.myhome.cx/1878870871879875/Sins-of-the-Fallen-Sins-of-the-Fallen-1-by-Karina-Espinosa.pdf
    • http://kitasdyu.myhome.cx/8877871870874873/Fallen-Angels---Die-Versuchung-Fallen-Angels-5-by-J-R-Ward.pdf
    • http://kitasdyu.myhome.cx/4872875871878878/The-Lie-by-Bethany-Mills.pdf
    • http://kitasdyu.myhome.cx/2877870876875879/Sacrificed-by-Nykki-Mills.pdf
    • http://kitasdyu.myhome.cx/2879877875870872/In-Love-and-War-by-Tara-Mills.pdf
    • http://kitasdyu.myhome.cx/8875871873874877/The-Mills-amp-Boon-Modern-Girl-s-Guide-to-Turning-into-Your-Mother-The-Perfect-Mothe

Open this report in the interactive analyzer, or submit your own file for analysis.