Malicious PDF — malware analysis report

Static analysis result for SHA-256 414da52ff77bd2a3…

MALICIOUS

PDF

43.3 KB Created: 2018-12-14 20:46:44 +03:00 Authoring application: DocBook XSL Stylesheets with Apache FOP (via Apache FOP Version 1.1) First seen: 2021-06-28
MD5: d70a2fa604b860ff9f97943767ad8544 SHA-1: ee5e5f017a0ed3bef0393987c2c94cc56295eca5 SHA-256: 414da52ff77bd2a30d03b633f66933128ccc7bada8c1b66209503f3c6e95afa7
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a heuristic firing indicating a large number of external links, suggesting a link farm or a method to distribute malicious content. The ML classifier also flagged the PDF as malicious. While no scripts were extracted, the sheer volume of links points towards a malicious intent, likely related to SEO manipulation or hosting further malicious payloads.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9171

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.gorillawalker.com/cyberbullying-through-the-new-media-findings-from-an-international-network.pdf In PDF document text
    • http://www.gorillawalker.com/camaro-restoration-handbook-hpbooks-758.pdfIn PDF document text
    • http://www.gorillawalker.com/chronic-pelvic-pain.pdfIn PDF document text
    • http://www.gorillawalker.com/systems-of-buddhistic-thought.pdfIn PDF document text
    • http://www.gorillawalker.com/open-economy-macroeconomics-in-developing-countries.pdfIn PDF document text
    • http://www.gorillawalker.com/semantics-volume-1.pdfIn PDF document text
    • http://www.gorillawalker.com/eagle-one-raising-bald-eagles-a-wildlife-memoir.pdfIn PDF document text
    • http://www.gorillawalker.com/successful-project-management-business-buddies-series.pdfIn PDF document text
    • http://www.gorillawalker.com/american-map-macon-ga-pocket-map.pdfIn PDF document text
    • http://www.gorillawalker.com/student-solutions-manual-for-swokowski-cole-s-fundamentals-of-college.pdfIn PDF document text
    • http://www.gorillawalker.com/the-art-of-educating-with-v-diagrams.pdfIn PDF document text
    • http://www.gorillawalker.com/goosebumps-most-wanted-6-creature-teacher-the-final-exam.pdfIn PDF document text
    • http://www.gorillawalker.com/the-thomas-guide-easy-to-read-orange-county-streetguide.pdfIn PDF document text
    • http://www.gorillawalker.com/chemistry-matter-and-change-florida-edition.pdfIn PDF document text
    • http://www.gorillawalker.com/black-decker-the-complete-guide-to-a-better-lawn-how.pdfIn PDF document text
    • http://www.gorillawalker.com/the-nonbeliever-s-guide-to-bible-stories.pdfIn PDF document text
    • http://www.gorillawalker.com/chistes-acertijos-y-adivinanzas-jokes-puzzles-and-riddles-mi-pequena.pdfIn PDF document text
    • http://www.gorillawalker.com/the-trial-and-death-of-socrates-four-dialogues-dover-thrift.pdfIn PDF document text
    • http://www.gorillawalker.com/franklin-merrell-wolff-s-experience-and-philosophy-a-personal-record.pdfIn PDF document text
    • http://www.gorillawalker.com/the-geography-of-wine-how-landscapes-cultures-terroir-and-the.pdfIn PDF document text
    • http://www.gorillawalker.com/dripping-with-fear-the-steve-ditko-archives-vol-5-vol.pdfIn PDF document text
    • http://www.gorillawalker.com/mayberry-bible-study-guide-vol-1.pdfIn PDF document text
    • http://www.gorillawalker.com/a-room-on-lorelei-street.pdfIn PDF document text
    • http://www.gorillawalker.com/borderlines-a-journey-in-thailand-and-burma.pdfIn PDF document text
    • http://www.gorillawalker.com/innovations-in-securitization-yearbook-2007-international-banking-and-finance-law.pdfIn PDF document text
    • http://www.gorillawalker.com/mel-bay-presents-favorite-accordion-solos-mel-bay-archive-editions.pdfIn PDF document text
    • http://www.gorillawalker.com/italia-the-most-beautiful-italian-cities-kindle-edition.pdfIn PDF document text
    • http://www.gorillawalker.com/authentic-patriotism-restoring-america-s-founding-ideals-through-selfless-action.pdfIn PDF document text
    • http://www.gorillawalker.com/memoranda-on-shakespeare-s-comedy-of-measure-for-measure.pdfIn PDF document text
    • http://www.gorillawalker.com/a-history-of-baccarat-modern-paperweights.pdfIn PDF document text
    • http://www.gorillawalker.com/classroom-how-to-improving-study-habits.pdfIn PDF document text
    • http://www.gorillawalker.com/enhanced-precision-fourth-edition.pdfIn PDF document text
    • http://www.gorillawalker.com/oracle-jdeveloper-11g-handbook-a-guide-to-fusion-web-development.pdfIn PDF document text
    • http://www.gorillawalker.com/courtroom-practice-in-the-21st-century-an-article-from-trial.pdfIn PDF document text
    • http://www.gorillawalker.com/luftwaffe-gravity-knife-a-history-and-analysis-of-the-flyer.pdfIn PDF document text
    • http://www.gorillawalker.com/galitsin-s-angels.pdfIn PDF document text
    • http://www.gorillawalker.com/swampland-plants-and-animals-coloring-book-dover-nature-coloring-book.pdfIn PDF document text
    • http://www.gorillawalker.com/play-1-nc6-a-complete-chess-opening-repertoire-for-black.pdfIn PDF document text
    • http://www.gorillawalker.com/the-a-game-nine-steps-to-better-grades.pdfIn PDF document text
    • http://www.gorillawalker.com/silicon-nitride-electrochemical-behaviour-colloidal-chemistry-and-chemical-reactions-gmelin.pdfIn PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text
    • http://www.aiim.org/pdfa/ns/extension/In PDF document text
    • http://www.aiim.org/pdfa/ns/schema#In PDF document text
    • http://www.aiim.org/pdfa/ns/property#In PDF document text
    • http://www.aiim.org/pdfa/ns/id/In PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.