Malicious PDF — malware analysis report

Static analysis result for SHA-256 2135c40389f17b36…

MALICIOUS

PDF

33.6 KB Created: 2019-12-13 08:39:42 +03:00 Authoring application: Adobe Acrobat 7.05 (via Adobe Acrobat 7.05 Paper Capture Plug-in) First seen: 2021-06-28
MD5: 028b7c9861afcc5f58ea0a0b033c748d SHA-1: e71351aa48d1555dcb8fa935f3c2aeee971f5cc7 SHA-256: 2135c40389f17b36f06ef8d8c8ee2ae08bc2f0f64d53589181e97ef8dbace507
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded links to external PDF files, primarily hosted on www.gorillawalker.com. This behavior is indicative of a link farm or a method to distribute content through numerous indirect links. The ML classifier also flagged the document as malicious, supporting the suspicious nature of the link farm.

Machine Learning

  • Nyx PDF Classifier malicious score 0.8529

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.gorillawalker.com/ou-on-va-papa-french-edition.pdf In PDF document text
    • http://www.gorillawalker.com/making-sense-of-the-new-adoption-law-a-guide-for.pdfIn PDF document text
    • http://www.gorillawalker.com/be-brief-be-bright-be-gone-career-essentials-for-pharmaceutical.pdfIn PDF document text
    • http://www.gorillawalker.com/postsocialism-politics-and-emotions-in-central-and-eastern-europe.pdfIn PDF document text
    • http://www.gorillawalker.com/mathematical-analysis-ii-universitext.pdfIn PDF document text
    • http://www.gorillawalker.com/american-headway-1-student-book-cds-2.pdfIn PDF document text
    • http://www.gorillawalker.com/alaska-weather-2010-wall-calendar.pdfIn PDF document text
    • http://www.gorillawalker.com/developing-leaders-for-the-small-church-a-guide-to-spiritual.pdfIn PDF document text
    • http://www.gorillawalker.com/my-first-79-years-isaac-stern.pdfIn PDF document text
    • http://www.gorillawalker.com/lost-splendor-the-amazing-memoirs-of-the-man-who-killed.pdfIn PDF document text
    • http://www.gorillawalker.com/exit-strategy-planning-grooming-your-business-for-sale-or-succession.pdfIn PDF document text
    • http://www.gorillawalker.com/bakery-products-in-latin-america-download-pdf-digital.pdfIn PDF document text
    • http://www.gorillawalker.com/golden-nuggets.pdfIn PDF document text
    • http://www.gorillawalker.com/conflict-culture-change-engaged-buddhism-in-a-globalizing-world.pdfIn PDF document text
    • http://www.gorillawalker.com/bryson-city-seasons-more-tales-of-a-doctor-s-practice.pdfIn PDF document text
    • http://www.gorillawalker.com/finite-mathematics-study-card.pdfIn PDF document text
    • http://www.gorillawalker.com/woody-herman-chronicles-of-the-herds.pdfIn PDF document text
    • http://www.gorillawalker.com/fearful-majesty-the-life-and-reign-of-ivan-the-terrible.pdfIn PDF document text
    • http://www.gorillawalker.com/democracy-and-participation-in-athens.pdfIn PDF document text
    • http://www.gorillawalker.com/oh-the-things-i-know-a-guide-to-success-or.pdfIn PDF document text
    • http://www.gorillawalker.com/eagle-strike-an-alex-rider-adventure.pdfIn PDF document text
    • http://www.gorillawalker.com/building-law-reports-v-19-hardcover.pdfIn PDF document text
    • http://www.gorillawalker.com/marie-curie-pioneering-physicist-mission-science-biographies.pdfIn PDF document text
    • http://www.gorillawalker.com/the-nyif-guide-to-mutual-funds-2001.pdfIn PDF document text
    • http://www.gorillawalker.com/network-warrior-everything-you-need-to-know-that-wasn-t.pdfIn PDF document text
    • http://www.gorillawalker.com/chamber-music-for-string-orchestra-1st-violin-samuel-applebaum-course.pdfIn PDF document text
    • http://www.gorillawalker.com/boron-neutron-capture-therapy-toward-clinical-trials-of-glioma-treatment.pdfIn PDF document text
    • http://www.gorillawalker.com/first-fruits-of-freedom-the-migration-of-former-slaves-and.pdfIn PDF document text
    • http://www.gorillawalker.com/all-for-the-best-the-secret-to-happiness.pdfIn PDF document text
    • http://www.gorillawalker.com/god-breathed-the-undeniable-power-and-reliability-of-scripture.pdfIn PDF document text
    • http://www.gorillawalker.com/string-quartet-2-op-34-d-minor-study-score-edition.pdfIn PDF document text
    • http://www.gorillawalker.com/tm-10-1670-282-23-p-us-army-technical-manual.pdfIn PDF document text
    • http://www.gorillawalker.com/pictures-at-an-exhibition-orchestral-excerpts-for-the-brass-section.pdfIn PDF document text
    • http://www.gorillawalker.com/ill-wind-valkyrie.pdfIn PDF document text
    • http://www.gorillawalker.com/iml-peri-pediatrc-resp-care-3e.pdfIn PDF document text
    • http://www.gorillawalker.com/prime-of-your-life-fast-track-to-a-better-life.pdfIn PDF document text
    • http://www.gorillawalker.com/all-things-are-connected-ssaaa-a-capella-with-optional-percussion.pdfIn PDF document text
    • http://www.gorillawalker.com/general-equilibrium-theory-an-introduction.pdfIn PDF document text
    • http://www.gorillawalker.com/scryed-book-5.pdfIn PDF document text
    • http://www.gorillawalker.com/mies-van-der-rohe-architecture-and-design-in-stuttgart-barcelona.pdfIn PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text
    • http://www.aiim.org/pdfa/ns/extension/In PDF document text
    • http://www.aiim.org/pdfa/ns/schema#In PDF document text
    • http://www.aiim.org/pdfa/ns/property#In PDF document text
    • http://www.aiim.org/pdfa/ns/id/In PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.