Malicious PDF — malware analysis report

Static analysis result for SHA-256 115bee2e24730305…

MALICIOUS

PDF

33.4 KB Created: 2019-11-23 19:52:22 +03:00 Authoring application: FineReader (via -)
MD5: 66f9e0998bb5882dc4ad7527d4c5c612 SHA-1: c360bf2ad252529f57564977c3c74301167783a8 SHA-256: 115bee2e24730305d1747140557098e6ee5724b9e7552c476b0c3c9f57c9a29c
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF was flagged by an ML classifier and contains a large number of embedded links to external PDF files, indicating a potential link farm or distribution mechanism. While no scripts were extracted, the sheer volume of links suggests a malicious intent, possibly to direct users to further malicious content or to manipulate search engine rankings. The primary attack pattern observed is the creation of a link farm, likely as a precursor to other malicious activities.

Machine Learning

  • Nyx PDF Classifier malicious score 0.7964

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.gorillawalker.com/material-culture-in-america-understanding-everyday-life.pdf
    • http://www.gorillawalker.com/useful-enemies-when-waging-wars-is-more-important-than-winning.pdf
    • http://www.gorillawalker.com/time-s-pendulum-from-sundials-to-atomic-clocks-the-fascinating.pdf
    • http://www.gorillawalker.com/guilty-by-gender-poems.pdf
    • http://www.gorillawalker.com/understanding-and-managing-vaccine-concerns-springerbriefs-in-public-health-springerbriefs.pdf
    • http://www.gorillawalker.com/a-history-of-biblical-israel-the-fate-of-the-tribes.pdf
    • http://www.gorillawalker.com/scientific-writing-for-psychology-lessons-in-clarity-and-style.pdf
    • http://www.gorillawalker.com/massif-du-jura-2-import-map.pdf
    • http://www.gorillawalker.com/how-to-get-your-point-across-in-30-seconds-or.pdf
    • http://www.gorillawalker.com/the-music-connection-grade-7-pupil-edition-2000c.pdf
    • http://www.gorillawalker.com/land-rover-experience-tour.pdf
    • http://www.gorillawalker.com/intraoperative-neurophysiologc.pdf
    • http://www.gorillawalker.com/frantz-fanon-and-the-future-of-cultural-politics-finding-something.pdf
    • http://www.gorillawalker.com/the-hole-of-the-story-kindle-edition.pdf
    • http://www.gorillawalker.com/get-ready.pdf
    • http://www.gorillawalker.com/banjo-chord-encyclopedia.pdf
    • http://www.gorillawalker.com/who-owns-the-past-the-politics-of-time-in-a.pdf
    • http://www.gorillawalker.com/frozen-yogurt-german-edition.pdf
    • http://www.gorillawalker.com/pine-barrens.pdf
    • http://www.gorillawalker.com/hollywood-goes-to-paris-paper-dolls.pdf
    • http://www.gorillawalker.com/it-ain-t-as-easy-as-it-looks-ted-turner.pdf
    • http://www.gorillawalker.com/the-bonnie-prince-charlie-cooke-my-football-life.pdf
    • http://www.gorillawalker.com/decision-support-and-business-intelligence-systems-8th-edition.pdf
    • http://www.gorillawalker.com/introduction-to-logic-14th-edition.pdf
    • http://www.gorillawalker.com/death-valley-geology-ecology-archaeology.pdf
    • http://www.gorillawalker.com/rob-smi-trauma-surgery-e4-v1-rob-and-smith-s.pdf
    • http://www.gorillawalker.com/boobytraps-u-s-army-instruction-manual-tactics-techniques-and-skills.pdf
    • http://www.gorillawalker.com/understanding-parkinson-s-disease-family-doctor-books.pdf
    • http://www.gorillawalker.com/making-money-series-how-to-choose-a-good-network-marketing.pdf
    • http://www.gorillawalker.com/flight-book-one-of-the-crescent-chronicles.pdf
    • http://www.gorillawalker.com/the-teachings-of-inner-ramana.pdf
    • http://www.gorillawalker.com/spectrum-learning-letters.pdf
    • http://www.gorillawalker.com/handbook-of-autism-and-pervasive-developmental-disorders-diagnosis-development-and.pdf
    • http://www.gorillawalker.com/plant-chromosome-engineering-methods-and-protocols-methods-in-molecular-biology.pdf
    • http://www.gorillawalker.com/blue-guide-paris-and-environs-blue-guide-paris-versailles.pdf
    • http://www.gorillawalker.com/media-violence-opposing-viewpoints.pdf
    • http://www.gorillawalker.com/how-to-beat-the-energy-thieves-and-make-your-life.pdf
    • http://www.gorillawalker.com/un-caissier-com-die-en-un-acte-french-edition.pdf
    • http://www.gorillawalker.com/the-national-question-in-yugoslavia-origins-history-politics.pdf
    • http://www.gorillawalker.com/medical-parasitologya-selfinstructional-text-3rd-third-edition.pdf
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#
    • http://purl.org/dc/elements/1.1/
    • http://ns.adobe.com/xap/1.0/
    • http://ns.adobe.com/pdf/1.3/
    • http://ns.adobe.com/xap/1.0/mm/
    • http://www.aiim.org/pdfa/ns/extension/
    • http://www.aiim.org/pdfa/ns/schema#
    • http://www.aiim.org/pdfa/ns/property#
    • http://www.aiim.org/pdfa/ns/id/

Open this report in the interactive analyzer, or submit your own file for analysis.