Malicious PDF — malware analysis report

Static analysis result for SHA-256 fa47eaeb12d79ceb…

MALICIOUS

PDF

15.4 KB Created: 2019-04-30 18:39:18 +01:00 Authoring application: mPDF 5.7
MD5: 872e7498cc59d5c11065f2b870b54f6e SHA-1: 26afd3b654bdd96d7301081a4c0e81c2aae914dc SHA-256: fa47eaeb12d79ceb21e39a2b3ea3d5691d845617acb6f0e9c64cde9442078781
60 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell

The PDF file contains a heuristic firing for a PDF SEO link farm, indicating a large number of external links. While the URLs themselves are currently marked as benign, the sheer volume and the nature of the heuristic suggest a potential for distributing malicious content or manipulating search engine results. No scripts were extracted, and the document body was unreadable.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/2099090098093095/The-Devil-Stopped-By-by-Sha-shonda-Porter.pdf
    • http://loaminoo.linkpc.net/2095096092094090/Naturally-Healthy-Woman-by-Shonda-Parker.pdf
    • http://loaminoo.linkpc.net/2094098090099099/Year-of-Yes-How-to-Dance-It-Out-Stand-In-the-Sun-and-Be-Your-Own-Person-by-Shonda-Rhimes.pdf
    • http://loaminoo.linkpc.net/9099094091091099/Porter---Abercrombie-by-W-Curtis-Porter.pdf
    • http://loaminoo.linkpc.net/2095096094099094/Mommy-Diagnostics-The-Naturally-Healthy-Family-s-Guide-to-Herbs-and-Whole-Foods-for-Health-by-Shonda-Parker.pdf
    • http://loaminoo.linkpc.net/5092096090094093/Places-I-Stopped-On-The-Way-Home-by-Meg-Fee.pdf
    • http://loaminoo.linkpc.net/3090094092094099/The-Day-the-Voices-Stopped-by-Ken-Steele.pdf
    • http://loaminoo.linkpc.net/2099097096/The-Stopped-Heart-by-Julie-Myerson.pdf
    • http://loaminoo.linkpc.net/8092094096093097/Chad-I-Can-t-Be-Stopped-by-Paul-Daugherty.pdf
    • http://loaminoo.linkpc.net/3098092096097092/The-Stopped-Heart-A-Novel-by-Julie-Myerson.pdf
    • http://loaminoo.linkpc.net/1091092096093097099/Man-Who-Stopped-the-Trains-to-Auschwitz-by-David-Kranzler.pdf
    • http://loaminoo.linkpc.net/7090099093095093/The-Anchor-That-Stopped-The-World-by-Agostino-Scafidi.pdf
    • http://loaminoo.linkpc.net/2095097093096/The-Girl-Who-Stopped-Swimming-by-Joshilyn-Jackson.pdf
    • http://loaminoo.linkpc.net/1097099096097093/As-The-World-Stopped-Turning-by-Lynn-Liccardo.pdf
    • http://loaminoo.linkpc.net/2092095094090096/Black-Noon-The-Year-They-Stopped-the-Indy-500-by-Art-Garner.pdf
    • http://loaminoo.linkpc.net/5092091090097096/The-Hat-City-After-Men-Stopped-Wearing-Hats-by-John-Surowiecki.pdf
    • http://loaminoo.linkpc.net/8098094095095/Christ-Stopped-at-Eboli-The-Story-of-a-Year-by-Carlo-Levi.pdf
    • http://loaminoo.linkpc.net/5091099099091096/When-Titans-Clashed-How-the-Red-Army-Stopped-Hitler-by-David-M-Glantz.pdf
    • http://loaminoo.linkpc.net/3090094092090094/A-Devil-Named-Desire-The-Devil-s-Bargain-2-by-Terri-Garey.pdf
    • http://loaminoo.linkpc.net/1092095091091093/The-Devil-s-Concubine-The-Devil-of-Ponong-series-1-by-Jill-Braden.pdf
    • http://loaminoo.linkpc.net/3098092096097092/The-S

Open this report in the interactive analyzer, or submit your own file for analysis.