Malicious PDF — malware analysis report

Static analysis result for SHA-256 26c7fe0453c83bb5…

MALICIOUS

PDF

35.7 KB Created: 2019-09-08 11:51:46 +03:00 Authoring application: LaTeX with hyperref package (via pdfeTeX-1.10b) First seen: 2021-06-28
MD5: e1e84ce6e5828e342f447c5921590eb0 SHA-1: 7d0b656f63b32ca67f422f09c583f687d107ad8c SHA-256: 26c7fe0453c83bb5b51d2a05cc7388a797097722b1355e75d6082a7d93c16179
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded URLs pointing to external PDF files on the same domain, as indicated by the PDF_SEO_LINK_FARM heuristic. While no scripts were explicitly extracted, the ML_NYX_PDF_MALICIOUS heuristic suggests malicious intent. The embedded URLs are likely used to manipulate search engine rankings or to distribute additional malicious content, aligning with a spearphishing attachment attack vector.

Machine Learning

  • Nyx PDF Classifier malicious score 0.8021

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.gorillawalker.com/specification-the-standard-reference-book-for-architects-surveryors-and-municipal.pdf In PDF document text
    • http://www.gorillawalker.com/paramedic-care-principles-practice-volume-7-operations-4th-edition.pdfIn PDF document text
    • http://www.gorillawalker.com/live-or-die-a-stroke-of-good-luck.pdfIn PDF document text
    • http://www.gorillawalker.com/hunting-the-shifter-paranormal-erotica-book-one.pdfIn PDF document text
    • http://www.gorillawalker.com/self-discipline-unleash-the-power-of-self-discipline-influence-and.pdfIn PDF document text
    • http://www.gorillawalker.com/flower-fairies-slim-calendar.pdfIn PDF document text
    • http://www.gorillawalker.com/jong-s-community-dental-health-4e.pdfIn PDF document text
    • http://www.gorillawalker.com/dark-embrace-the-masters-of-time-book-3.pdfIn PDF document text
    • http://www.gorillawalker.com/how-to-survive-hearing-loss.pdfIn PDF document text
    • http://www.gorillawalker.com/alceste-wq-44-divinites-du-styx-a-flat-major-oboe.pdfIn PDF document text
    • http://www.gorillawalker.com/a-z-of-animal-poems-volume-1.pdfIn PDF document text
    • http://www.gorillawalker.com/something-to-hide-nancy-drew-files-book-41-kindle-edition.pdfIn PDF document text
    • http://www.gorillawalker.com/2022-what-will-happen-to-us-when-the-anunnaki-return.pdfIn PDF document text
    • http://www.gorillawalker.com/ancient-angkor-river-books-guides.pdfIn PDF document text
    • http://www.gorillawalker.com/greenmarket-to-gotham-recipe-journal-gotham-recipe-journals.pdfIn PDF document text
    • http://www.gorillawalker.com/the-smoking-gun-a-kelly-family-novel-the-kelly-family.pdfIn PDF document text
    • http://www.gorillawalker.com/amoenitates-historiae-ecclesiasticae-et-literariae-quibus-variae-observationes-scripta-item.pdfIn PDF document text
    • http://www.gorillawalker.com/iran-s-political-economy-since-the-revolution.pdfIn PDF document text
    • http://www.gorillawalker.com/i-hope-they-serve-beer-in-hell-movie-tie-in.pdfIn PDF document text
    • http://www.gorillawalker.com/party-wall-workbook-a-guide-for-architects-appointed-to-act.pdfIn PDF document text
    • http://www.gorillawalker.com/benchmarking-praxis-in-deutschen-unternehmen-german-edition.pdfIn PDF document text
    • http://www.gorillawalker.com/uterine-fibroids-pipeline-review-q1-2011-download-pdf-digital.pdfIn PDF document text
    • http://www.gorillawalker.com/the-fantasy-art-of-royo-calendar-common.pdfIn PDF document text
    • http://www.gorillawalker.com/applied-econometrics-a-modern-approach-using-eviews-and-microfit-revised.pdfIn PDF document text
    • http://www.gorillawalker.com/color-atlas-of-neuropathology-oxford-color-atlases-of-pathology.pdfIn PDF document text
    • http://www.gorillawalker.com/the-five-forty-five-to-cannes.pdfIn PDF document text
    • http://www.gorillawalker.com/ecological-engineering-and-ecosystem-restoration.pdfIn PDF document text
    • http://www.gorillawalker.com/the-bottom-of-the-harbor.pdfIn PDF document text
    • http://www.gorillawalker.com/dog-on-the-roof-on-the-road-with-mitt-and.pdfIn PDF document text
    • http://www.gorillawalker.com/essential-osce-topics-for-medical-and-surgical-finals-masterpass-series.pdfIn PDF document text
    • http://www.gorillawalker.com/prodded-and-probed-a-futa-medical-menage-erotica-book-6.pdfIn PDF document text
    • http://www.gorillawalker.com/drug-metab-from-molecule-to-man.pdfIn PDF document text
    • http://www.gorillawalker.com/the-romance-of-the-sowdone-of-babylone-and-of-ferumbras.pdfIn PDF document text
    • http://www.gorillawalker.com/hurricane-days.pdfIn PDF document text
    • http://www.gorillawalker.com/gus-and-grandpa-and-the-two-wheeled-bike.pdfIn PDF document text
    • http://www.gorillawalker.com/atomic-winter-kindle-edition.pdfIn PDF document text
    • http://www.gorillawalker.com/dementia-ups-mortality-risk-threefold-patients-with-parkinson-s-disease.pdfIn PDF document text
    • http://www.gorillawalker.com/symbols-of-transformation-volume-i-an-analysis-of-the-prelude.pdfIn PDF document text
    • http://www.gorillawalker.com/substance-abuse-counseling-theory-and-practice-with-mycounselinglab-without-pearson.pdfIn PDF document text
    • http://www.gorillawalker.com/qar-comprehension-lessons-grades-6-8-16-lessons-with-text.pdfIn PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text
    • http://www.aiim.org/pdfa/ns/extension/In PDF document text
    • http://www.aiim.org/pdfa/ns/schema#In PDF document text
    • http://www.aiim.org/pdfa/ns/property#In PDF document text
    • http://www.aiim.org/pdfa/ns/id/In PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.