Malicious PDF — malware analysis report

Static analysis result for SHA-256 fe1b5b81de114ead…

MALICIOUS

PDF

15.1 KB Created: 2019-04-30 02:38:58 +01:00 Authoring application: mPDF 5.7
MD5: 83542d8209d67dc9c760a2b49c4ff5bf SHA-1: f7e35fb70a38dfbd01af538fae851d337bfae878 SHA-256: fe1b5b81de114ead784423569ee2a1a6fadf3c68337b23b66272c6129565c246
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF document contains a large number of embedded links to external PDF files, characteristic of a link farm. While the document body is heavily obfuscated, the heuristic firings and the presence of numerous URLs suggest a malicious intent to redirect users to potentially harmful content. No scripts were extracted from this sample.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/4098091097099090/Confessions-of-a-Hollywood-Star-Confessions-of-a-Teenage-Drama-Queen-3-by-Dyan-Sheldon.pdf
    • http://loaminoo.linkpc.net/7098091095099099/Pengakuan-Si-Ratu-Drama-Confession-of-a-Teenage-Drama-Queen---by-Dyan-Sheldon.pdf
    • http://loaminoo.linkpc.net/1096098094094098/Confessions-of-a-Teenage-Hermaphrodite-by-Lianne-Simon.pdf
    • http://loaminoo.linkpc.net/6096099095094093/Sara-McNeil-True-Confessions-of-a-Teenage-Lesbian-by-Master-Coe.pdf
    • http://loaminoo.linkpc.net/3098094090099095/Confessions-of-a-Hollywood-Agent-by-William-Louis-Gardner.pdf
    • http://loaminoo.linkpc.net/7095099091090/True-Confessions-of-a-Hollywood-Starlet-by-Lara-Deloza.pdf
    • http://loaminoo.linkpc.net/4094091096090090/Confessions-of-a-Murder-Suspect-Confessions-1-by-James-Patterson.pdf
    • http://loaminoo.linkpc.net/4090095096093095/Confessions-of-an-Angry-Girl-Confessions-1-by-Louise-Rozett.pdf
    • http://loaminoo.linkpc.net/1092099095094096/Confessions-of-a-Murder-Suspect-Confessions-1-by-James-Patterson.pdf
    • http://loaminoo.linkpc.net/3095097096099096/Confessions-of-a-Queen-B-The-Queen-B-1-by-Crista-McHugh.pdf
    • http://loaminoo.linkpc.net/1099094098090091/Confessions-of-a-Virgin-Sex-Columnist-Confessions-1-by-Kay-Marie.pdf
    • http://loaminoo.linkpc.net/6099092094097092/Confessions-of-a-Klutz-Confessions-1-by-Abigail-Davies.pdf
    • http://loaminoo.linkpc.net/2099095090096099/I-Don-t-Know-What-You-Know-Me-From-Confessions-of-a-Co-Star-by-Judy-Greer.pdf
    • http://loaminoo.linkpc.net/4098096094092097/Confessions-of-a-Geriatric-Prom-Queen-by-Lila-Lee-Silvern.pdf
    • http://loaminoo.linkpc.net/3096091094093090/Confessions-of-a-Carb-Queen-A-Memoir-by-Susan-Blech.pdf
    • http://loaminoo.linkpc.net/6092095099091/You-Can-Never-Go-Home-Again-by-Dyan-Sheldon.pdf
    • http://loaminoo.linkpc.net/6090092092097/Save-the-Last-Dance-for-Me-by-Dyan-Sheldon.pdf
    • http://loaminoo.linkpc.net/1091096098091094/My-Worst-Best-Friend-by-Dyan-Sheldon.pdf
    • http://loaminoo.linkpc.net/1098098094093093/Catch-a-Rising-Star-Drama-Queen-1-by-Tracey-Bateman.pdf
    • http://loaminoo.linkpc.net/7097092090091094/Sophie-Pitt-Turnbull-Discovers-America-by-Dyan-Sheldon.pdf
    • http://loaminoo.linkpc.net/1099094098090091/Confessions-of-a-Virgin-Sex-Columnist-Co

Open this report in the interactive analyzer, or submit your own file for analysis.