Malicious PDF — malware analysis report

Static analysis result for SHA-256 f305ca4450c2771d…

MALICIOUS

PDF

19.6 KB Created: 2019-05-02 02:31:44 +01:00 Authoring application: mPDF 5.7
MD5: 685feec485d0f57b26520fb634c22a6e SHA-1: db09a9f2fcbd1319e8bf291794d0084175dee8b3 SHA-256: f305ca4450c2771ddc84587d74bd1c78e3cfbd223486833fd305ad71f1c0c127
60 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell

The PDF file contains a heuristic firing for PDF_SEO_LINK_FARM, indicating a mass of external links. The document body confirms the presence of numerous URLs, all pointing to the same domain with varying book titles. While these specific URLs are marked as benign, the sheer volume and structure suggest a malicious intent, possibly for SEO spam or to host further malicious content. No scripts were extracted from this sample.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/4093095092091091/Death-s-Head-Day-of-the-Damned-Death-s-Head-3-by-David-Gunn.pdf
    • http://loaminoo.linkpc.net/2098097093095090/Death-s-Head-Narc-1-by-Mel-Keegan.pdf
    • http://loaminoo.linkpc.net/3093099091095098/Death-s-Head-Narc-1-by-Mel-Keegan.pdf
    • http://loaminoo.linkpc.net/4090092092093090/The-Order-of-the-Death-s-Head-The-Story-of-Hitler-s-SS-by-Heinz-H-hne.pdf
    • http://loaminoo.linkpc.net/3096094092095094/Hard-Head-Head-2-by-Damon-Suede.pdf
    • http://loaminoo.linkpc.net/8097099093095/Hot-Head-Head-1-by-Damon-Suede.pdf
    • http://loaminoo.linkpc.net/1090094096095/Hot-Head-Head-1-by-Damon-Suede.pdf
    • http://loaminoo.linkpc.net/1095095095094099/Dragon-Head-Volume-1-Dragon-Head-1-by-Minetar-Mochizuki.pdf
    • http://loaminoo.linkpc.net/6095096093094091/The-Secret-History-of-the-Calves-Head-Club-or-the-Republican-Unmask-d-With-a-Large-Continuation-and-an-Appendix-to-the-History-Wherein-Is-Fully-Shewn-the-Religion-of-the-Calves-Head-Heroes-in-Their-Anniversary-Thanksgiving-Songs-on-the-30th-of-Janua-by-Edward-Ward.pdf
    • http://loaminoo.linkpc.net/4094091097091090/Bang-Your-Head-The-Rise-and-Fall-of-Heavy-Metal-by-David-Konow.pdf
    • http://loaminoo.linkpc.net/4093095091098092/The-Koala-of-Death-A-Gunn-Zoo-Mystery-2-by-Betty-Webb.pdf
    • http://loaminoo.linkpc.net/9090099093097095/The-Koala-of-Death-A-Gunn-Zoo-Mystery-2-by-Betty-Webb.pdf
    • http://loaminoo.linkpc.net/4092096095097/The-Death-of-Love-The-Damned-Hunger-Chronicles-2-by-D-B-Tarpley.pdf
    • http://loaminoo.linkpc.net/2098098092094095/Death-in-a-White-Tie-Overture-to-Death-Death-at-the-Bar-by-Ngaio-Marsh.pdf
    • http://loaminoo.linkpc.net/8090096097095098/Stitch-Head-Stitch-Head-1-by-Guy-Bass.pdf
    • http://loaminoo.linkpc.net/8096091094096/J-D-Robb-CD-Collection-7-Visions-in-Death-Survivor-in-Death-Origin-in-Death-by-J-D-Robb.pdf
    • http://loaminoo.linkpc.net/4090096090099093/J-D-Robb-Collection-1-Naked-in-Death-Glory-in-Death-Immortal-in-Death-by-J-D-Robb.pdf
    • http://loaminoo.linkpc.net/5091095093098095/Happy-Death-Day---Happy-Death-Day-Jisatsu-ya-Yomiji-to-Satsujinki-Dorian-Happy-Death-Day-1-by-.pdf
    • http://loaminoo.linkpc.net/4099096093095091/Choosing-Death-The-Improbable-History-of-Death-Metal-and-Grindcore-by-Albert-Mudrian.pdf
    • http://loaminoo.linkpc.net/4094098095094094/Erasing-Death-The-Science-That-Is-Rewriting-the-Boundaries-Between-Life-and-Death-by-Sam-Parnia.pdf
    • http://loaminoo.linkpc.net/6095096093094091/The-Secret-History-of-the-Calves-Head-Club-or-the-Republican-Unmask-d-With-a-Large-Continuation-and-an-Appendix-to-the-History-Wherein-Is-Fully-Shewn-the-Religion-of-the-Calves-Head-Heroes-in-Their-Anniversary-Th