Malicious PDF — malware analysis report

Static analysis result for SHA-256 31e71b4f73d39fc4…

MALICIOUS

PDF

31.4 KB Created: 2019-09-02 22:01:08 +03:00 Authoring application: TeX (via MiKTeX pdfTeX-1.10b)
MD5: 85cc130acf96670de80c3f5aa6002793 SHA-1: b454a76be2e6291b2bffce19c5ecd4296060a205 SHA-256: 31e71b4f73d39fc408c6c2478ebeac00b464474e49da20fefe577acac358ffca
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1204.002 Malicious Link

The PDF contains a large number of embedded URLs pointing to external websites, as indicated by the PDF_SEO_LINK_FARM heuristic. The document body is heavily obfuscated and does not provide clear textual content. The primary function appears to be directing users to a link farm, likely for SEO manipulation or to serve as a distribution point for further malicious content.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.gorillawalker.com/cerebral-vasospasm-acta-neurochirurgica-supplement.pdf
    • http://www.gorillawalker.com/the-abc-of-winter-foods.pdf
    • http://www.gorillawalker.com/sell-your-music-how-to-profitably-sell-your-own-recordings.pdf
    • http://www.gorillawalker.com/iphone-application-development-for-dummies.pdf
    • http://www.gorillawalker.com/katie-s-midnight-ride-lorimer-sports-stories.pdf
    • http://www.gorillawalker.com/crunchtime-constitutional-law-print-ebook-bonus-pack-constitutional-law-studydesk.pdf
    • http://www.gorillawalker.com/baptism-in-the-new-testament.pdf
    • http://www.gorillawalker.com/most-used-words-in-plato.pdf
    • http://www.gorillawalker.com/sums-of-squares-of-integers-discrete-mathematics-and-its-applications.pdf
    • http://www.gorillawalker.com/english-yes-level-1-basic.pdf
    • http://www.gorillawalker.com/araxi-seasonal-recipes-from-the-celebrated-whistler-restaurant.pdf
    • http://www.gorillawalker.com/wie-eine-blume-im-paradies-antigua-in-guatemala-german-edition.pdf
    • http://www.gorillawalker.com/goalie-interference-nhl-scorpions-2.pdf
    • http://www.gorillawalker.com/pluto-and-charon-space-science-series.pdf
    • http://www.gorillawalker.com/hamlet-s-104-full-score-a5335.pdf
    • http://www.gorillawalker.com/nature-and-art-as-needs-of-the-mind-leverhulme-memorial.pdf
    • http://www.gorillawalker.com/homeland-the-illustrated-history-of-the-state-of-israel.pdf
    • http://www.gorillawalker.com/victims-and-warriors-violence-history-and-memory-in-amazonia-interp.pdf
    • http://www.gorillawalker.com/symphony-no-8-d-759-for-violin-and-piano-1822.pdf
    • http://www.gorillawalker.com/voices-of-the-ancestors-african-myth-myth-and-mankind.pdf
    • http://www.gorillawalker.com/a-dictionary-of-dentistry-oxford-paperback-reference.pdf
    • http://www.gorillawalker.com/mobile-robots-navigation-control-and-remote-sensing.pdf
    • http://www.gorillawalker.com/community-economic-creativity-and-organization.pdf
    • http://www.gorillawalker.com/the-man-in-the-red-velvet-dress-inside-the-world.pdf
    • http://www.gorillawalker.com/faeries-calendar-2002.pdf
    • http://www.gorillawalker.com/the-marketplace-book-one-of-the-marketplace-series-unabridged-audible.pdf
    • http://www.gorillawalker.com/angling-for-words-study-workbook.pdf
    • http://www.gorillawalker.com/emotion-self-regulation-and-athletic-performance-an-application-of-the.pdf
    • http://www.gorillawalker.com/five-thousand-years-of-pakistan-an-archaeological-outline.pdf
    • http://www.gorillawalker.com/for-country-and-corps-the-life-of-general-oliver-p.pdf
    • http://www.gorillawalker.com/jazzed-on-hymns-book-cd.pdf
    • http://www.gorillawalker.com/love-surfaced.pdf
    • http://www.gorillawalker.com/beatings-and-bureaucracy-the-founding-memos-of-al-qaeda-kindle.pdf
    • http://www.gorillawalker.com/geometry-topology-physics-for-raoul-bott-conference-proceedings-and-lecture.pdf
    • http://www.gorillawalker.com/y-gan-olaf-welsh-edition.pdf
    • http://www.gorillawalker.com/debridement-continues-to-gain-support-in-care-of-venous-leg.pdf
    • http://www.gorillawalker.com/aceites-esenciales-de-grado-terap-utico-gu-a-de-referencia.pdf
    • http://www.gorillawalker.com/the-boy-who-dared.pdf
    • http://www.gorillawalker.com/coloniality-in-the-cliff-swallow-the-effect-of-group-size.pdf
    • http://www.gorillawalker.com/a-simplified-approach-to-image-processing-classical-and-modern-techniques.pdf
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#
    • http://purl.org/dc/elements/1.1/
    • http://ns.adobe.com/xap/1.0/
    • http://ns.adobe.com/pdf/1.3/
    • http://ns.adobe.com/xap/1.0/mm/
    • http://www.aiim.org/pdfa/ns/extension/
    • http://www.aiim.org/pdfa/ns/schema#
    • http://www.aiim.org/pdfa/ns/property#
    • http://www.aiim.org/pdfa/ns/id/

Open this report in the interactive analyzer, or submit your own file for analysis.