Malicious PDF — malware analysis report

Static analysis result for SHA-256 f6db6e3ad2514ca4…

MALICIOUS

PDF

26.1 KB Created: 2019-04-30 02:15:42 +01:00 Authoring application: mPDF 5.7
MD5: 811f49b4b0a7530c3a5ac11b69487364 SHA-1: d0f5cd871a3881d9cf34330005166ae6616e59b1 SHA-256: f6db6e3ad2514ca4a06aa2d7bfcfdb0e3b71145560fd67e28b69298a30e7e13a
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF file contains a heuristic firing for a large number of external links, suggesting a link farm. While the document body is heavily obfuscated, the presence of numerous URLs, many pointing to book titles, indicates a potential attempt to manipulate search engine results or to host a large number of potentially malicious or deceptive links. The primary attack pattern observed is the creation of a link farm within the PDF.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/8093091091094093/The-Widow-s-Knight-The-Bogue-Harbor-Series-Book-2-by-Jeri-Mareau.pdf
    • http://loaminoo.linkpc.net/8093091090098099/Fresh-Dirt-A-Tale-From-Bogue-County-Tales-From-Bogue-County-Book-1-by-Tyler-Andrews.pdf
    • http://loaminoo.linkpc.net/1091090092090094099/The-Grass-Widow-Sequel-to-The-Milch-Bride-Cowboy-Romance-Series-Book-3-by-J-R-Biery.pdf
    • http://loaminoo.linkpc.net/2098097096090/Gull-Harbor-by-Kathryn-Knight.pdf
    • http://loaminoo.linkpc.net/8093091090098098/Bogue-and-Allied-Families-by-Virgil-T-Bogue.pdf
    • http://loaminoo.linkpc.net/2094091097092093/Evie-s-Knight-The-Knight-Series-1-by-Kimberly-Krey.pdf
    • http://loaminoo.linkpc.net/1093093095097094/Orson-Scott-Card-Series-Reading-Order-amp-Checklist-Series-List-in-Order---Ender-Series-Formic-War-Series-Shadow-Series-Ender-Series-amp-Tales-of-Alvin-Maker-Series-Listabook-Series-Order-Book-15-by-Listabook.pdf
    • http://loaminoo.linkpc.net/5098099094099/Beyond-a-Doubt-Rock-Harbor-Series-2-by-Colleen-Coble.pdf
    • http://loaminoo.linkpc.net/4093094095091098/The-Widow-Ireland-Series-1-by-Carla-Neggers.pdf
    • http://loaminoo.linkpc.net/5094094098094098/Brandon-Mull-Series-Reading-Order-amp-Checklist-Series-List-in-Order---Five-Kingdom-Series-Fablehaven-Series-Beyonders-Trilogy-Candy-Shop-War-Series-Listabook-Series-Order-Book-24-by-Listabook.pdf
    • http://loaminoo.linkpc.net/7091096092099096/Maya-Banks-Series-Reading-Order-amp-Checklist-Series-List-in-Order---KGI-Series-Enforcers-Series-Slow-Burn-Series-amp-All-Other-Books-Listabook-Series-Order-Book-58-by-Listabook.pdf
    • http://loaminoo.linkpc.net/2092097096096095/The-Widow-Next-Door-Learning-to-live-again-as-a-young-widow-and-single-mom-after-losing-my-husband-to-suicide-by-Heather-Cruz.pdf
    • http://loaminoo.linkpc.net/1091099097092097096/Sacrificed-amp-Reclaimed---The-Soldier-s-Daring-Widow-8-Love-s-Second-Chance-Series---Bonus-Novella-by-Bree-Wolf.pdf
    • http://loaminoo.linkpc.net/1097098091093091/Rose-Harbor-in-Bloom-Rose-Harbor-2-by-Debbie-Macomber.pdf
    • http://loaminoo.linkpc.net/2090090092099099/Christmas-Eve-at-Friday-Harbor-Friday-Harbor-1-by-Lisa-Kleypas.pdf
    • http://loaminoo.linkpc.net/3090097094098096/The-Temptation-The-Medieval-Knight-Series-4-by-Claudia-Dain.pdf
    • http://loaminoo.linkpc.net/3091090092094092/Anti-Inflammatory-Book-Series-Get-The-Best-Of-Essential-Kitchen-Series--Over-100-Delicious-amp-Easy-to-Cook-Recipes-to-Fight-Inflammation-Slow-Aging-Combat-Yourself-The-Essential-Kitchen-Series-59-by-Sarah-Sophia.pdf
    • http://loaminoo.linkpc.net/4098094093097095/NOT-A-BOOK-Epic-of-the-Damned-The-Eclipse-Series---Book-One-by-NOT-A-BOOK.pdf
    • http://loaminoo.linkpc.net/4096097092099095/Pearl-Harbor-Pearl-Harbor-1-by-Newt-Gingrich.pdf
    • http://loaminoo.linkpc.net/2094098094092091/Toxic-New-Year-The-Day-That-Wouldn-t-End-Fourth-Book-in-the-Alexandra-Destephano-Series-Alex-Desephano-Series-4-by-Judith-Lucci.pdf
    • http://loaminoo.linkpc.net/1093093095097094/Orson-Scott-Card-Series-Rea

Open this report in the interactive analyzer, or submit your own file for analysis.