Malicious PDF — malware analysis report

Static analysis result for SHA-256 1ac74f1ce2e2e2bd…

MALICIOUS

PDF

42.5 KB Created: 2019-04-03 18:19:09 +03:00 Authoring application: QuarkXPress: pictwpstops filter 1.0 (via Mac OS X 10.6.8 Quartz PDFContext) First seen: 2021-06-28
MD5: 643dd79f15fb1d75587e4841fe2ce161 SHA-1: b4908330d2bf9ff6a0c1daba636ae1eb225a111a SHA-256: 1ac74f1ce2e2e2bd99c69f063a68e8b4b12c9c6c4eef3353bf121d700623a330
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded external links, identified by the PDF_SEO_LINK_FARM heuristic. These links all point to the same domain, suggesting an attempt to manipulate search engine results or distribute content from a controlled source. The ML_NYX_PDF_MALICIOUS heuristic also flagged the document with high confidence. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9181

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.gorillawalker.com/dependence-logic-a-new-approach-to-independence-friendly-logic-london.pdf In PDF document text
    • http://www.gorillawalker.com/the-jigsaw-sticker-book.pdfIn PDF document text
    • http://www.gorillawalker.com/feathered-touch-wyrd-bound-book-2.pdfIn PDF document text
    • http://www.gorillawalker.com/the-merchant-shipping-port-state-control-amendment-regulations-1998-statutory.pdfIn PDF document text
    • http://www.gorillawalker.com/platelets-and-megakaryocytes-volume-3-additional-protocols-and-perspectives-methods.pdfIn PDF document text
    • http://www.gorillawalker.com/conan-s-world-and-robert-e-howard-milford-series-popular.pdfIn PDF document text
    • http://www.gorillawalker.com/bread-and-pastry-recipes-of-the-world-famous-chefs-united.pdfIn PDF document text
    • http://www.gorillawalker.com/aufbau-mentaler-starke-beim-radfahren-durch-meditation-entfalte-dein-potenzial.pdfIn PDF document text
    • http://www.gorillawalker.com/aliens-predator-aliens.pdfIn PDF document text
    • http://www.gorillawalker.com/history-of-the-university-of-the-south-at-sewanee-tennessee.pdfIn PDF document text
    • http://www.gorillawalker.com/co-chaos-patterns-the-i-ching-fractal-double-bubble-toe.pdfIn PDF document text
    • http://www.gorillawalker.com/splice-volume-3-issue-2.pdfIn PDF document text
    • http://www.gorillawalker.com/waste-management-prevention-recycling-conservation-managing-our-waste.pdfIn PDF document text
    • http://www.gorillawalker.com/the-tourism-system-an-introductory-text.pdfIn PDF document text
    • http://www.gorillawalker.com/digital-design-and-computer-architecture-print-replica-kindle-edition.pdfIn PDF document text
    • http://www.gorillawalker.com/the-familiars.pdfIn PDF document text
    • http://www.gorillawalker.com/the-great-transfer-of-wealth-financial-release-for-advancing-god.pdfIn PDF document text
    • http://www.gorillawalker.com/mosby-s-dental-drug-reference-10e.pdfIn PDF document text
    • http://www.gorillawalker.com/songs-of-the-90s-the-decade-series-trombone.pdfIn PDF document text
    • http://www.gorillawalker.com/evolution-of-archeopyle-and-tabulation-in-rhaetogonyaulacinean-dinoflagellate-cysts-life.pdfIn PDF document text
    • http://www.gorillawalker.com/elements-of-language-student-one-stop-think-central-student-access.pdfIn PDF document text
    • http://www.gorillawalker.com/the-tapping-solution-for-pain-relief-a-step-by-step.pdfIn PDF document text
    • http://www.gorillawalker.com/treating-gambling-problems.pdfIn PDF document text
    • http://www.gorillawalker.com/the-best-of-integrity-music-25-songs-of-worship-and.pdfIn PDF document text
    • http://www.gorillawalker.com/trapped-in-timelessness-lake-s-curse-kindle-edition.pdfIn PDF document text
    • http://www.gorillawalker.com/12-concerti-grossi-op-6-concerto-no-12-in-f.pdfIn PDF document text
    • http://www.gorillawalker.com/tigger-s-moving-day-my-very-first-winnie-the-pooh.pdfIn PDF document text
    • http://www.gorillawalker.com/1999-chevrolet-tahoe-suburban-owners-manual.pdfIn PDF document text
    • http://www.gorillawalker.com/team-bonding.pdfIn PDF document text
    • http://www.gorillawalker.com/spiritual-warfare-lifeguide-bible-studies.pdfIn PDF document text
    • http://www.gorillawalker.com/strategic-modelling-and-business-dynamics-website-a-feedback-system-approach.pdfIn PDF document text
    • http://www.gorillawalker.com/synthetic-biology-from-igem-to-the-artificial-cell-springerbriefs-in.pdfIn PDF document text
    • http://www.gorillawalker.com/cecile-and-the-treasures-of-belamor-mystic-heroine-adventures.pdfIn PDF document text
    • http://www.gorillawalker.com/180-delicious-vegetarian-potato-recipes-delicious-meat-free-recipes-featuring.pdfIn PDF document text
    • http://www.gorillawalker.com/savoring-italy-recipes-and-reflections-on-italian-cooking-savoring-series.pdfIn PDF document text
    • http://www.gorillawalker.com/la-gracia-de-dios-y-el-vecino-homosexual-spanish-edition.pdfIn PDF document text
    • http://www.gorillawalker.com/san-marino-country-study-guide.pdfIn PDF document text
    • http://www.gorillawalker.com/foucault-health-and-medicine.pdfIn PDF document text
    • http://www.gorillawalker.com/diy-home-skin-care-for-every-one-kindle-edition.pdfIn PDF document text
    • http://www.gorillawalker.com/peloponnese-general-guide.pdfIn PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text
    • http://www.aiim.org/pdfa/ns/extension/In PDF document text
    • http://www.aiim.org/pdfa/ns/schema#In PDF document text
    • http://www.aiim.org/pdfa/ns/property#In PDF document text
    • http://www.aiim.org/pdfa/ns/id/In PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.