Malicious PDF — malware analysis report

Static analysis result for SHA-256 5daaef581fa90462…

MALICIOUS

PDF

46.4 KB Created: 2018-11-26 20:07:16 +03:00 Authoring application: dvipsk 5.58f Copyright 1986, 1994 Radical Eye Software (via Acrobat Distiller 3.0 f r Macintosh)
MD5: 866021eb21bd97cb1b2ea611a2447234 SHA-1: 07e4d811930ac47e012dbe7523c19bf9171099ec SHA-256: 5daaef581fa90462d0e668ea3612c34cd117d0f85562771293898eb4e1b2a927
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded URLs pointing to external PDF files on the domain 'gorillawalker.com'. This behavior is indicative of a link farm, likely intended for SEO manipulation or to distribute additional malicious content. The ML classifier also flagged this PDF as malicious.

Machine Learning

  • Nyx PDF Classifier malicious score 0.8518

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.gorillawalker.com/photoinitiation-photopolymerization-and-photocuring-fundamentals-and-applications.pdf
    • http://www.gorillawalker.com/the-golden-door-the-united-states-from-1865-to-1918.pdf
    • http://www.gorillawalker.com/essentials-of-psychological-testing-essentials-of-behavioral-science.pdf
    • http://www.gorillawalker.com/evita.pdf
    • http://www.gorillawalker.com/data-protection-a-practical-guide-to-uk-and-eu-law.pdf
    • http://www.gorillawalker.com/star-wars-a-new-hope-the-original-radio-drama-topps.pdf
    • http://www.gorillawalker.com/the-history-buff-s-guide-to-world-war-ii-top.pdf
    • http://www.gorillawalker.com/vancouver-island-letters-of-edmund-hope-verney-1862-65-pioneers.pdf
    • http://www.gorillawalker.com/the-rough-guide-to-denmark-rough-guide-travel-guides-by.pdf
    • http://www.gorillawalker.com/horizons-2-student-book-book-2.pdf
    • http://www.gorillawalker.com/cispr-16-2-4-ed-1-0-b-2003-specification.pdf
    • http://www.gorillawalker.com/grow-a-little-fruit-tree-simple-pruning-techniques-for-small.pdf
    • http://www.gorillawalker.com/bed-breakfast-bedlam-a-logan-dickerson-cozy-mystery-book-1.pdf
    • http://www.gorillawalker.com/under-the-influence-secrets-from-a-dui-lawyer-kindle-edition.pdf
    • http://www.gorillawalker.com/barefoot-contessa-farm-stand-wire-o-bound-journal-potter-style.pdf
    • http://www.gorillawalker.com/apuntamientos-sobre-la-provincia-de-guanacaste-en-la-republica-de.pdf
    • http://www.gorillawalker.com/rogue-urbanism-emergent-african-cities.pdf
    • http://www.gorillawalker.com/the-golden-sisters-martha-s-girls.pdf
    • http://www.gorillawalker.com/the-rhine-cycle-route-from-source-to-sea-through-switzerland.pdf
    • http://www.gorillawalker.com/better-location-shooting-techniques-for-video-production.pdf
    • http://www.gorillawalker.com/tactica-y-estrategia-en-el-medio-juego-tactics-and-strategy.pdf
    • http://www.gorillawalker.com/because-i-said-so-the-truth-behind-the-myths-tales.pdf
    • http://www.gorillawalker.com/seeking-sicily-a-cultural-journey-through-myth-and-reality-in.pdf
    • http://www.gorillawalker.com/dreams-found.pdf
    • http://www.gorillawalker.com/the-tourist-gaze-leisure-and-travel-in-contemporary-societies-theory.pdf
    • http://www.gorillawalker.com/leading-like-jesus-40-leadership-lessons-from-the-upside-down.pdf
    • http://www.gorillawalker.com/ex-vivo-and-in-vivo-optical-molecular-pathology.pdf
    • http://www.gorillawalker.com/el-museo-de-los-suenos-the-museum-of-dreams-austral.pdf
    • http://www.gorillawalker.com/optical-information-processing-and-holography.pdf
    • http://www.gorillawalker.com/in-pursuit-of-excellence-fourth-edition-kindle-edition.pdf
    • http://www.gorillawalker.com/law-of-the-sea-melland-schill-studies-in-international-law.pdf
    • http://www.gorillawalker.com/cleft-palate-craniofacial-anomalies-effects-on-speech-and-resonance-with.pdf
    • http://www.gorillawalker.com/mother-of-the-blues-a-study-of-ma-rainey.pdf
    • http://www.gorillawalker.com/sexually-transmitted-diseases-epidemiology-pathology-diagnosis-and-treatment.pdf
    • http://www.gorillawalker.com/reading-for-the-gifted-student-grade-6-for-the-gifted.pdf
    • http://www.gorillawalker.com/infliximab-found-effective-for-treating-palmoplantar-psoriasis-in-small-trial.pdf
    • http://www.gorillawalker.com/the-ala-dag-climbs-and-treks-in-turkeys-crimson-mountai.pdf
    • http://www.gorillawalker.com/women-autobiography-theory-a-reader-wisconsin-studies-in-american-autobiography.pdf
    • http://www.gorillawalker.com/the-savvy-traveler-s-guide-to-fun-down-under-melbourne.pdf
    • http://www.gorillawalker.com/cima-fundamentals-of-financial-accounting-study-text.pdf
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#
    • http://purl.org/dc/elements/1.1/
    • http://ns.adobe.com/xap/1.0/
    • http://ns.adobe.com/pdf/1.3/
    • http://ns.adobe.com/xap/1.0/mm/
    • http://www.aiim.org/pdfa/ns/extension/
    • http://www.aiim.org/pdfa/ns/schema#
    • http://www.aiim.org/pdfa/ns/property#
    • http://www.aiim.org/pdfa/ns/id/

Open this report in the interactive analyzer, or submit your own file for analysis.