Malicious PDF — malware analysis report

Static analysis result for SHA-256 513efc661f050701…

MALICIOUS

PDF

43.7 KB Created: 2018-12-02 20:09:55 +03:00 Authoring application: FrameMaker 6.0 (via Acrobat Distiller 6.0.1 for Macintosh)
MD5: 4ad7777a4b578198a339a0964f248422 SHA-1: 793dfd734d94a935a693d83ce8d838d6e89609a6 SHA-256: 513efc661f050701c070f801ffb31b2dfe36ece05b5b0521792cce202add0c55
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1204.002 Malicious File

The PDF was flagged by a machine learning classifier as malicious and contains a large number of embedded external links. The heuristic PDF_SEO_LINK_FARM indicates a link farm, suggesting the document's primary purpose is to host these links. The embedded URLs point to various PDF documents, likely to manipulate search engine results or serve as a distribution point for further malicious content.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9016

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.gorillawalker.com/the-renaissance-ethics-of-music-singing-contemplation-and-musica-humana.pdf
    • http://www.gorillawalker.com/environmental-aesthetics-crossing-divides-and-breaking-ground-groundworks-ecological-issues.pdf
    • http://www.gorillawalker.com/the-must-sees-of-seoul-bravo-your-city-book-70.pdf
    • http://www.gorillawalker.com/theory-of-functions-of-a-complex-variable-second-edition-3.pdf
    • http://www.gorillawalker.com/i-sonetti-italian-edition.pdf
    • http://www.gorillawalker.com/grandmas-short-and-sweet-survival-guide.pdf
    • http://www.gorillawalker.com/legal-remedies-for-housing-code-violations.pdf
    • http://www.gorillawalker.com/the-techno-play-along.pdf
    • http://www.gorillawalker.com/from-a-raw-deal-to-a-new-deal-african-americans.pdf
    • http://www.gorillawalker.com/traditional-buildings-a-global-survey-of-structural-forms-and-cultural.pdf
    • http://www.gorillawalker.com/a-traves-del-espejo-y-lo-que-alicia-encontro-al.pdf
    • http://www.gorillawalker.com/field-guide-to-bird-nests-and-eggs-of-alaska-s.pdf
    • http://www.gorillawalker.com/anaerobic-fungi-biology-ecology-and-function-mycology.pdf
    • http://www.gorillawalker.com/india-telecom-laws-and-regulations-handbook-world-law-business-library.pdf
    • http://www.gorillawalker.com/women-aging-in-prison-a-neglected-population-in-the-correctional.pdf
    • http://www.gorillawalker.com/practical-approach-to-pediatric-gastroenterology-hepatology-and-nutrition.pdf
    • http://www.gorillawalker.com/shree-ganesh-upasana-romanized-sanskrit-with-colour-illustrations-english-and.pdf
    • http://www.gorillawalker.com/walk-through-survey-report-monsanto-texas-city-texas.pdf
    • http://www.gorillawalker.com/the-genetics-of-the-dog.pdf
    • http://www.gorillawalker.com/does-it-absorb-or-repel-liquid-what-s-the-matter.pdf
    • http://www.gorillawalker.com/psychos-a-white-girl-problems-book.pdf
    • http://www.gorillawalker.com/how-i-live-now.pdf
    • http://www.gorillawalker.com/60-minute-training-series-set-how-to-resolve-conflict-effectively.pdf
    • http://www.gorillawalker.com/how-to-brief-a-case.pdf
    • http://www.gorillawalker.com/women-work-and-computerization-breaking-old-boundaries-building-new-forms.pdf
    • http://www.gorillawalker.com/pachinko-hisshouhou-japanese-edition-kindle-edition.pdf
    • http://www.gorillawalker.com/the-victim-s-guide-to-the-dentist-victim-s-guides.pdf
    • http://www.gorillawalker.com/my-story-unabridged-audible-audio-edition.pdf
    • http://www.gorillawalker.com/wood-through-water-classic-power-boats.pdf
    • http://www.gorillawalker.com/america-s-great-loop-beyond-cruising-on-a-frugal-budget.pdf
    • http://www.gorillawalker.com/death-lies-dead-the-allusive-texture-of-swinburne-s-a.pdf
    • http://www.gorillawalker.com/peanuts-2015-mini-day-to-day-calendar.pdf
    • http://www.gorillawalker.com/young-frederick-douglass-the-maryland-years-maryland-paperback-bookshelf.pdf
    • http://www.gorillawalker.com/shush-a-taboo-erotica-collection-kindle-edition.pdf
    • http://www.gorillawalker.com/the-spirit-of-peace-pentecost-and-affliction-in-the-middle.pdf
    • http://www.gorillawalker.com/new-york-on-500-a-day-before-lunch.pdf
    • http://www.gorillawalker.com/diary-of-a-singing-zombie-an-unofficial-minecraft-book-minecraft.pdf
    • http://www.gorillawalker.com/power-cards-using-special-interests-to-motivate-children-and-youth.pdf
    • http://www.gorillawalker.com/because-you-re-mine-mine-1.pdf
    • http://www.gorillawalker.com/americans-in-darmstadt-1945.pdf
    • http://www.gorillawalker.com/grandmas-short-and-sweet-
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#
    • http://purl.org/dc/elements/1.1/
    • http://ns.adobe.com/xap/1.0/
    • http://ns.adobe.com/pdf/1.3/
    • http://ns.adobe.com/xap/1.0/mm/
    • http://www.aiim.org/pdfa/ns/extension/
    • http://www.aiim.org/pdfa/ns/schema#
    • http://www.aiim.org/pdfa/ns/property#
    • http://www.aiim.org/pdfa/ns/id/

Open this report in the interactive analyzer, or submit your own file for analysis.