Malicious PDF — malware analysis report

Static analysis result for SHA-256 1d124c219966bf4d…

MALICIOUS

PDF

44.9 KB Created: 2019-03-17 07:50:33 +03:00 Authoring application: Adobe Acrobat 8.3 Combine Files (via Adobe Acrobat 8.31 Paper Capture Plug-in)
MD5: 4f22509df2c2b7ad83b7a871ebece7f9 SHA-1: 53ad48d64e65c2e0a8b4e4b0097ae093f6ecd764 SHA-256: 1d124c219966bf4d383b8b0aa516177a0cebc83bad18c549eab622cf4693a6c5
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious File

The PDF was flagged by a machine learning classifier and contains a large number of embedded links to external PDFs, indicating a link farm or a distribution mechanism for other malicious content. The primary heuristic indicates a 'PDF_SEO_LINK_FARM' with 32 external links, suggesting a tactic to manipulate search engine rankings or distribute content. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.8640

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.gorillawalker.com/instant-healing-from-cutting-edge-scientific-research-to-ancient-rituals.pdf
    • http://www.gorillawalker.com/top-25-oil-and-gas-kpis-of-2011-2012-paperback.pdf
    • http://www.gorillawalker.com/organizational-wisdom-and-executive-courage.pdf
    • http://www.gorillawalker.com/jacob.pdf
    • http://www.gorillawalker.com/money-awards-in-contract-law-hart-studies-in-private-law.pdf
    • http://www.gorillawalker.com/the-eye-in-the-door.pdf
    • http://www.gorillawalker.com/mussolini-the-rise-and-fall-of-il-duce.pdf
    • http://www.gorillawalker.com/hepadna-viruses-molecular-biology-and-pathogenesis-current-topics-in-microbiology.pdf
    • http://www.gorillawalker.com/rette-mein-paradies-german-edition.pdf
    • http://www.gorillawalker.com/navigation-rules-and-regulations-handbook.pdf
    • http://www.gorillawalker.com/federal-discipline.pdf
    • http://www.gorillawalker.com/alba-s-medical-technology-board-exam-review-1987-questions-and.pdf
    • http://www.gorillawalker.com/x-files-classics-volume-3-the-x-files-classics.pdf
    • http://www.gorillawalker.com/new-world-young-latino-writers.pdf
    • http://www.gorillawalker.com/my-kleinian-home-a-journey-through-four-psychotherapies-into-a.pdf
    • http://www.gorillawalker.com/adventure-guide-to-dublin.pdf
    • http://www.gorillawalker.com/globetrotter-diaries-300-tales-tips-and-tactics-for-traveling-the.pdf
    • http://www.gorillawalker.com/the-journal-of-the-fell-rock-climbing-club-of-the.pdf
    • http://www.gorillawalker.com/vegetation-et-geomorphologie-bailleul-1985-colloques-phytosociologiques-vol-13.pdf
    • http://www.gorillawalker.com/third-opinion.pdf
    • http://www.gorillawalker.com/pediatric-epilepsy-surgery-fails-to-aid-later-cognitive-function-care.pdf
    • http://www.gorillawalker.com/los-evangelios-gnosticos-the-gnostic-gospels-jesus-de-nazaret-biblioteca.pdf
    • http://www.gorillawalker.com/luring-a-lady-the-stanislaskis.pdf
    • http://www.gorillawalker.com/the-yes-book-the-art-of-better-negotiation.pdf
    • http://www.gorillawalker.com/la-diva-nicotina-the-story-of-how-tobacco-seduced-the.pdf
    • http://www.gorillawalker.com/connect-the-shapes-crochet-motifs-creative-techniques-for-joining-motifs.pdf
    • http://www.gorillawalker.com/qualitative-research-design-an-interactive-approach-applied-social-research-methods.pdf
    • http://www.gorillawalker.com/guatemala-the-prospects-for-peace-hearing-before-the-subcommittees-on.pdf
    • http://www.gorillawalker.com/euthanasia-is-not-the-answer-by-cundiff-david-author-jul.pdf
    • http://www.gorillawalker.com/wine-tasting-enjoying-and-understanding-christie-wine-publications.pdf
    • http://www.gorillawalker.com/john-todd-and-the-underground-railroad-biography-of-an-iowa.pdf
    • http://www.gorillawalker.com/the-real-vocal-book-volume-2-high-voice-fake-book.pdf
    • http://www.gorillawalker.com/pathfinder-tales-pirate-s-honor.pdf
    • http://www.gorillawalker.com/the-tide-knot-ingo.pdf
    • http://www.gorillawalker.com/carmen-act-i-habanera-l-amour-est-un-oiseau-rebelle.pdf
    • http://www.gorillawalker.com/the-chaperon-s-seduction-the-infamous-arrandales-kindle-edition.pdf
    • http://www.gorillawalker.com/subliminal-affirmations-for-recovering-co-dependents.pdf
    • http://www.gorillawalker.com/g-i-victory-the-u-s-army-in-world-war.pdf
    • http://www.gorillawalker.com/mind-in-a-physical-world-an-essay-on-the-mind.pdf
    • http://www.gorillawalker.com/cook-yourself-thin-skinny-meals-you-can-make-in-minutes.pdf
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#
    • http://purl.org/dc/elements/1.1/
    • http://ns.adobe.com/xap/1.0/
    • http://ns.adobe.com/pdf/1.3/
    • http://ns.adobe.com/xap/1.0/mm/
    • http://www.aiim.org/pdfa/ns/extension/
    • http://www.aiim.org/pdfa/ns/schema#
    • http://www.aiim.org/pdfa/ns/property#
    • http://www.aiim.org/pdfa/ns/id/

Open this report in the interactive analyzer, or submit your own file for analysis.