PDF malware analysis — malicious · f5c3a4473283c33a

MALICIOUS

PDF

15.7 KB Created: 2019-04-30 17:30:29 +01:00 Authoring application: mPDF 5.7 First seen: 2020-05-25

MD5: 6f23ac17b35adfeeeafba313b356e75a SHA-1: 4278758a155ffac66541b1a56f8ed5ba920f84ad SHA-256: f5c3a4473283c33ade98e73a12a8395c3610b0861e399e721558001f798f876e

60 Risk Score

Malware Insights

MITRE ATT&CK

T1566.002 Spearphishing Attachment

The PDF file contains a large number of embedded links to external PDF documents, constituting a link farm. The primary heuristic indicates this is a mass external PDF link farm, with the dominant host being loaminoo.linkpc.net. No scripts were extracted from this sample. The attack pattern is likely to trick users into visiting these links, potentially leading to further malicious content or phishing.

Heuristics 2

Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM

Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
Embedded URL info EMBEDDED_URL

One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
URL http://loaminoo.linkpc.net/2090093098095091/Allah-s-Miracles-in-the-Qur-an-by-Harun-Yahya.pdf In PDF document text
- http://loaminoo.linkpc.net/1093096098094090/Miracles-of-The-Qur-an-by-Harun-Yahya.pdfIn PDF document text
- http://loaminoo.linkpc.net/1095098095096092/The-Miracle-in-the-Ant-by-Harun-Yahya.pdfIn PDF document text
- http://loaminoo.linkpc.net/8092094091099099/Some-Secrets-of-the-Quran-by-Harun-Yahya.pdfIn PDF document text
- http://loaminoo.linkpc.net/8092094091097093/Islam-Denounces-Terrorism-by-Harun-Yahya.pdfIn PDF document text
- http://loaminoo.linkpc.net/8092094090099092/The-Moral-Values-of-the-Quran-by-Harun-Yahya.pdfIn PDF document text
- http://loaminoo.linkpc.net/8092094093096099/Understanding-Islam---Quick-Grasp-of-Faith-by-Harun-Yahya.pdfIn PDF document text
- http://loaminoo.linkpc.net/1094092090093097/The-Errors-of-the-National-Academy-of-Sciences-A-Reply-to-the-Booklet-Science-and-Creationism-by-Harun-Yahya.pdfIn PDF document text
- http://loaminoo.linkpc.net/1093096098097092/Darwinism-Refuted-How-the-Theory-of-Evolution-Breaks-Down-in-the-Light-of-Modern-Science-by-Harun-Yahya.pdfIn PDF document text
- http://loaminoo.linkpc.net/8096091097099/Miracles-amp-Merits-of-Allah-s-Messenger---Al-Bidayah-VI-by--.pdfIn PDF document text
- http://loaminoo.linkpc.net/7095098092095097/Mohammed-s-Allah-Allah-As-Introduced-By-Mohammed-by-Ahmed-Hulusi.pdfIn PDF document text
- http://loaminoo.linkpc.net/4091095090093090/When-Life-Begins-by-Abu-Yahya.pdfIn PDF document text
- http://loaminoo.linkpc.net/8092094090093091/Turbines-Compressors-And-Fans-by-S-M-Yahya.pdfIn PDF document text
- http://loaminoo.linkpc.net/4093090098092093/The-Collar-and-the-Bracelet-by-Yahya-Taher-Abdullah.pdfIn PDF document text
- http://loaminoo.linkpc.net/1090090098090095099/Archipel-Indonesia-Kingdoms-of-the-Sea-by-Andi-F-Yahya.pdfIn PDF document text
- http://loaminoo.linkpc.net/1091090098098091094/Sword-of-Allah-by-James-Marinero.pdfIn PDF document text
- http://loaminoo.linkpc.net/7097095093096/Allah-is-Not-Obliged-by-Ahmadou-Kourouma.pdfIn PDF document text
- http://loaminoo.linkpc.net/1091090098097094096/The-Road-to-Allah-by-Jalaluddin-Rakhmat.pdfIn PDF document text
- http://loaminoo.linkpc.net/5092093098096092/Children-Of-Allah-by-Folco-Quilici.pdfIn PDF document text
- http://loaminoo.linkpc.net/5096092097096093/ALLAH-BARBE-DU-PROPHETE-by-ALBERT-FRANTZ.pdfIn PDF document text
- http://loaminoo.linkpc.net/1093096098097092/DarwinisIn PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.