Malicious PDF — malware analysis report

Static analysis result for SHA-256 370a77bfb1ad9205…

MALICIOUS

PDF

41.7 KB Created: 2018-11-14 08:20:16 +03:00 Authoring application: BookVirtual Digital Works (via BookVirtual Corp. Patents Pending.)
MD5: 5464e5bf19c7a5ae608c79050289365e SHA-1: b20d480f4443fb3e807aaedfd0940a62f7ef77bb SHA-256: 370a77bfb1ad9205d897440d86a5b4fd00d6bc1111c7a54af1913edb09c95d6b
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious File

The PDF file was flagged by a machine learning classifier as malicious. Static analysis revealed a 'PDF_SEO_LINK_FARM' heuristic, indicating the presence of numerous external links within the document. These links, such as 'http://www.gorillawalker.com/euthanasia-a-decade-of-change-excerpts-from-annual-conferences-1968.pdf', likely serve as a lure to direct users to potentially harmful websites or to download further malicious payloads.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9027

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.gorillawalker.com/euthanasia-a-decade-of-change-excerpts-from-annual-conferences-1968.pdf
    • http://www.gorillawalker.com/chromatography-volume-22a-fundamentals-and-aplications-of-chromatographic-and-electrophoretic.pdf
    • http://www.gorillawalker.com/biotechnology-for-beginners.pdf
    • http://www.gorillawalker.com/lessons-in-tanya-the-tanya-of-r-shnuer-zalman-of.pdf
    • http://www.gorillawalker.com/how-to-draw-dolphins-and-other-sea-creatures-how-to.pdf
    • http://www.gorillawalker.com/shades-of-reality-tales-of-horror-and-dark-fantasy-kindle.pdf
    • http://www.gorillawalker.com/finding-the-funny-fast-how-to-create-quick-humor-to.pdf
    • http://www.gorillawalker.com/liver-pathology-demos-surgical-pathology-guides.pdf
    • http://www.gorillawalker.com/true-love-and-other-disasters-chinooks-hockey-team.pdf
    • http://www.gorillawalker.com/panama-fever-the-epic-story-of-the-building-of-the.pdf
    • http://www.gorillawalker.com/glee-volume-3-showstoppers.pdf
    • http://www.gorillawalker.com/my-boss-the-futa-a-futanari-erotic-short.pdf
    • http://www.gorillawalker.com/good-news-in-the-obituary-7-meditations-on-life-and.pdf
    • http://www.gorillawalker.com/the-debauchery-bundle-vol-3-strap-on-bukkake-paranormal-tentacle.pdf
    • http://www.gorillawalker.com/mutual-fund-regulation-and-compliance-handbook-2009-2010-ed-securities.pdf
    • http://www.gorillawalker.com/the-divine-incarnation-of-panchanan-bhattacharya-chief-disciple-of-lahiri.pdf
    • http://www.gorillawalker.com/analogies-reproducible-grades-6-8.pdf
    • http://www.gorillawalker.com/the-english-colonization-of-america-exploration-and-discovery.pdf
    • http://www.gorillawalker.com/paranormal-beast-collection-mf-group-erotica-short-stories-ravaged-by.pdf
    • http://www.gorillawalker.com/dictionary-of-proper-names-and-notable-matters-in-the-works.pdf
    • http://www.gorillawalker.com/the-deadliest-lies-the-israel-lobby-and-the-myth-of.pdf
    • http://www.gorillawalker.com/immigration-manual-immigration-manual-volume-2.pdf
    • http://www.gorillawalker.com/guide-to-seo-master-blueprint-with-your-website-kindle-edition.pdf
    • http://www.gorillawalker.com/beginning-jsp-jsf-and-tomcat-java-web-development-expert-s.pdf
    • http://www.gorillawalker.com/diccionario-geografico-historica-de-la-espana-antigua-tarraconense-betica-y.pdf
    • http://www.gorillawalker.com/dynamic-meteorology-and-hydrology.pdf
    • http://www.gorillawalker.com/the-dogs-of-winter.pdf
    • http://www.gorillawalker.com/24-melodious-low-register-etudes-for-tuba.pdf
    • http://www.gorillawalker.com/the-effective-team-s-operational-excellence-workbook.pdf
    • http://www.gorillawalker.com/deviant-moon-tarot.pdf
    • http://www.gorillawalker.com/replicator-run.pdf
    • http://www.gorillawalker.com/integrated-handwork.pdf
    • http://www.gorillawalker.com/side-by-side-core-conversation-beginning.pdf
    • http://www.gorillawalker.com/jonesborough-the-first-century-of-tennessee-s-first-town.pdf
    • http://www.gorillawalker.com/faculty-success-through-mentoring-a-guide-for-mentors-mentees-and.pdf
    • http://www.gorillawalker.com/from-jerusalem-to-irian-jaya.pdf
    • http://www.gorillawalker.com/mega-memory-american-memory-institute.pdf
    • http://www.gorillawalker.com/slut-the-play.pdf
    • http://www.gorillawalker.com/ornamentalism-how-the-british-saw-their-empire.pdf
    • http://www.gorillawalker.com/allende-et-l-experience-chilienne-cahiers-de-la-fondation-nationale.pdf
    • http://www.gorillawalker.com/how-to-draw-dolphins-and-other-sea
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#
    • http://purl.org/dc/elements/1.1/
    • http://ns.adobe.com/xap/1.0/
    • http://ns.adobe.com/pdf/1.3/
    • http://ns.adobe.com/xap/1.0/mm/
    • http://www.aiim.org/pdfa/ns/extension/
    • http://www.aiim.org/pdfa/ns/schema#
    • http://www.aiim.org/pdfa/ns/property#
    • http://www.aiim.org/pdfa/ns/id/

Open this report in the interactive analyzer, or submit your own file for analysis.