Malicious PDF — malware analysis report

Static analysis result for SHA-256 1cb37631274fd8fb…

MALICIOUS

PDF

34.0 KB Created: 2019-09-02 21:55:48 +03:00 Authoring application: - (via Adobe Acrobat 10.0 Paper Capture Plug-in) First seen: 2021-10-14
MD5: 253f10a4ddaac78dc455a0bafa8eda95 SHA-1: 61dac77ed683413b00f97858e1a1624e3759b5a2 SHA-256: 1cb37631274fd8fbe565d647b06269af2dba9cf8c51762bf2ed47e132604051c
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded external links, as indicated by the PDF_SEO_LINK_FARM heuristic. The ML classifier also flagged the document as malicious. The primary purpose appears to be directing users to a link farm, potentially for SEO manipulation or to host further malicious content, rather than a direct user-facing lure.

Machine Learning

  • Nyx PDF Classifier malicious score 0.8529

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.gorillawalker.com/how-to-talk-so-kids-will-listen-listen-so-kids.pdf In PDF document text
    • http://www.gorillawalker.com/baby-caillou-looks-around-the-seasons-a-toddler-s-search.pdfIn PDF document text
    • http://www.gorillawalker.com/pictures-at-an-exhibition-orchestrated-by-maurice-ravel-eulenburg-audio.pdfIn PDF document text
    • http://www.gorillawalker.com/organizational-communication.pdfIn PDF document text
    • http://www.gorillawalker.com/rainfall-intensity-duration-frequency-curves-and-maps-for-nigeria-occasional.pdfIn PDF document text
    • http://www.gorillawalker.com/c-o-que-novela-spanish-edition.pdfIn PDF document text
    • http://www.gorillawalker.com/stock-car-model-kit-encyclopedia-price-guide.pdfIn PDF document text
    • http://www.gorillawalker.com/gods-at-war-student-edition-the-battle-for-your-heart.pdfIn PDF document text
    • http://www.gorillawalker.com/weight-watchers-new-complete-cookbook-fifth-edition-over-500-delicious.pdfIn PDF document text
    • http://www.gorillawalker.com/clinical-dialogues-in-family-therapy-based-on-the-psychotherapy-of.pdfIn PDF document text
    • http://www.gorillawalker.com/the-animated-film-encyclopedia-a-complete-guide-to-american-shorts.pdfIn PDF document text
    • http://www.gorillawalker.com/my-brother-charlie.pdfIn PDF document text
    • http://www.gorillawalker.com/el-minutero-y-otras-prosas-spanish-edition.pdfIn PDF document text
    • http://www.gorillawalker.com/barcelona-barcelona-spain-travel-guide-book-a-comprehensive-5-day.pdfIn PDF document text
    • http://www.gorillawalker.com/ninth-ward.pdfIn PDF document text
    • http://www.gorillawalker.com/mother-pious-lady-making-sense-of-everyday-india.pdfIn PDF document text
    • http://www.gorillawalker.com/horizontal-equity-uncertainty-and-economic-well-being-national-bureau-of.pdfIn PDF document text
    • http://www.gorillawalker.com/averting-the-final-failure-john-f-kennedy-and-the-secret.pdfIn PDF document text
    • http://www.gorillawalker.com/the-smith-and-kraus-play-index-for-young-actors-grades.pdfIn PDF document text
    • http://www.gorillawalker.com/a-rumour-of-spring-south-africa-after-20-years-of.pdfIn PDF document text
    • http://www.gorillawalker.com/the-story-of-life-a-first-book-about-evolution.pdfIn PDF document text
    • http://www.gorillawalker.com/working-with-adolescent-violence-and-abuse-towards-parents-approaches-and.pdfIn PDF document text
    • http://www.gorillawalker.com/the-hand-quick-study-academic.pdfIn PDF document text
    • http://www.gorillawalker.com/essentials-of-biophysics.pdfIn PDF document text
    • http://www.gorillawalker.com/adobe-dreamweaver-cs3-the-professional-portfolio-portfolio-series-cs3.pdfIn PDF document text
    • http://www.gorillawalker.com/the-dry-drunk-syndrome.pdfIn PDF document text
    • http://www.gorillawalker.com/stochastic-quantum-mechanics-and-quantum-spacetime-a-consistent-unification-of.pdfIn PDF document text
    • http://www.gorillawalker.com/borobudur-golden-tales-of-the-buddhas-periplus-travel-guides.pdfIn PDF document text
    • http://www.gorillawalker.com/the-carolina-watermen-bug-hunters-and-boat-builders-twayne-english.pdfIn PDF document text
    • http://www.gorillawalker.com/your-worst-poker-enemy.pdfIn PDF document text
    • http://www.gorillawalker.com/creating-level-pull-a-lean-production-system-improvement-guide-for.pdfIn PDF document text
    • http://www.gorillawalker.com/ed-s-story-my-garden-ed-s-story-ask-forgiveness.pdfIn PDF document text
    • http://www.gorillawalker.com/melt-inclusions-in-volcanic-systems-methods-applications-and-problems-developments.pdfIn PDF document text
    • http://www.gorillawalker.com/the-human-body-fearfully-and-wonderfully-made.pdfIn PDF document text
    • http://www.gorillawalker.com/mel-bay-left-hand-guitar-chord-book.pdfIn PDF document text
    • http://www.gorillawalker.com/freight-train-train-time.pdfIn PDF document text
    • http://www.gorillawalker.com/the-natural-history-of-aggression.pdfIn PDF document text
    • http://www.gorillawalker.com/haiku-by-unohu.pdfIn PDF document text
    • http://www.gorillawalker.com/divertimento-in-aeroporto-italian-edition.pdfIn PDF document text
    • http://www.gorillawalker.com/i-spy-fly-guy.pdfIn PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text
    • http://www.aiim.org/pdfa/ns/extension/In PDF document text
    • http://www.aiim.org/pdfa/ns/schema#In PDF document text
    • http://www.aiim.org/pdfa/ns/property#In PDF document text
    • http://www.aiim.org/pdfa/ns/id/In PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.