Malicious PDF — malware analysis report

Static analysis result for SHA-256 62a63a48893d59e3…

MALICIOUS

PDF

32.4 KB Created: 2019-12-13 08:13:47 +03:00 Authoring application: FrameMaker 8.0 (via Acrobat Distiller 10.0.1 (Windows)) First seen: 2020-07-02
MD5: b6fc569970c9ebee121d54297b453558 SHA-1: 9868c30de909cb5baaa6b92aa01d2304ce5a68b2 SHA-256: 62a63a48893d59e3a27c6d7fb1c9b2854d721da4722593504b9c5815ceef99b0
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded links pointing to external PDF files, a technique often used for SEO manipulation or to distribute malware. The ML classifier also flagged this PDF as malicious. While no scripts were extracted, the sheer volume of links suggests a malicious intent to redirect the user to potentially harmful content.

Machine Learning

  • Nyx PDF Classifier malicious score 0.8529

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.gorillawalker.com/logistics-engineering-management-6th-edition.pdf In PDF document text
    • http://www.gorillawalker.com/coffeehouse-angel.pdfIn PDF document text
    • http://www.gorillawalker.com/antonin-dvorak-requiem-op-89-klavirni-vytah-klavierauszug-vocal-score.pdfIn PDF document text
    • http://www.gorillawalker.com/shadows-dreams-kate-kane-paranormal-investigations.pdfIn PDF document text
    • http://www.gorillawalker.com/the-australian-country-girl-history-image-experience.pdfIn PDF document text
    • http://www.gorillawalker.com/head-and-neck-imaging-case-review-series-4e.pdfIn PDF document text
    • http://www.gorillawalker.com/the-history-of-beaufort-county-south-carolina-1514-1861.pdfIn PDF document text
    • http://www.gorillawalker.com/principles-of-hazardous-materials-management-second-edition.pdfIn PDF document text
    • http://www.gorillawalker.com/easyscript-level-2-how-to-take-fast-notes.pdfIn PDF document text
    • http://www.gorillawalker.com/aldrich-library-of-nmr-spectra-2-vol-set.pdfIn PDF document text
    • http://www.gorillawalker.com/rahab-s-story-women-of-the-bible.pdfIn PDF document text
    • http://www.gorillawalker.com/cinderotica-book-3-back-to-black-kindle-edition.pdfIn PDF document text
    • http://www.gorillawalker.com/a-clinical-manual-for-nursing-assistants.pdfIn PDF document text
    • http://www.gorillawalker.com/engineering-network-analysis.pdfIn PDF document text
    • http://www.gorillawalker.com/oral-histology-development-structure-and-function-5e.pdfIn PDF document text
    • http://www.gorillawalker.com/practical-biblical-guide-in-handling-stress.pdfIn PDF document text
    • http://www.gorillawalker.com/merriam-webster-s-french-english-dictionary.pdfIn PDF document text
    • http://www.gorillawalker.com/fun-with-the-family-southern-california-7th-hundreds-of-ideas.pdfIn PDF document text
    • http://www.gorillawalker.com/world-politics-trend-and-transformation-2014-2015-book-only.pdfIn PDF document text
    • http://www.gorillawalker.com/a-date-for-the-bear-bbw-paranormal-shape-shifter-romance.pdfIn PDF document text
    • http://www.gorillawalker.com/illustrated-lighthouse-2001-calendar.pdfIn PDF document text
    • http://www.gorillawalker.com/colon-and-rectal-cancer-a-comprehensive-guide-for-patients-and.pdfIn PDF document text
    • http://www.gorillawalker.com/africa-seven-continents.pdfIn PDF document text
    • http://www.gorillawalker.com/tug-of-war-the-allied-victory-that-opened-antwerp.pdfIn PDF document text
    • http://www.gorillawalker.com/aviation-maintenance-technician-powerplant-aviation-maintenance-technician-series.pdfIn PDF document text
    • http://www.gorillawalker.com/managing-government-property-assets-international-experiences.pdfIn PDF document text
    • http://www.gorillawalker.com/mensa-for-kids-75-mind-mazes.pdfIn PDF document text
    • http://www.gorillawalker.com/encyclopaedia-of-chinese-cookery-technique.pdfIn PDF document text
    • http://www.gorillawalker.com/red-cloak.pdfIn PDF document text
    • http://www.gorillawalker.com/an-introduction-to-folk-wrestling-kindle-edition.pdfIn PDF document text
    • http://www.gorillawalker.com/life-in-hong-kong-1856-1859.pdfIn PDF document text
    • http://www.gorillawalker.com/pandora-hearts-vol-2.pdfIn PDF document text
    • http://www.gorillawalker.com/inclusion-or-illusion-educational-provision-for-primary-school-children-with.pdfIn PDF document text
    • http://www.gorillawalker.com/numerical-linear-algebra-and-optimization-vol-1.pdfIn PDF document text
    • http://www.gorillawalker.com/emerging-multinationals-in-emerging-markets.pdfIn PDF document text
    • http://www.gorillawalker.com/the-polar-world-the-unique-vision-of-sir-wally-herbert.pdfIn PDF document text
    • http://www.gorillawalker.com/pcat-prep-test-arithmetic-review-flash-cards-cram-now-pcat.pdfIn PDF document text
    • http://www.gorillawalker.com/brazil-enchantment-of-the-world-second.pdfIn PDF document text
    • http://www.gorillawalker.com/advanced-techniques-for-clay-mineral-analysis-developments-in-sedimentology.pdfIn PDF document text
    • http://www.gorillawalker.com/a-practical-dictionary-of-chinese-medicine-2nd-ed-2000-printing.pdfIn PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text
    • http://www.aiim.org/pdfa/ns/extension/In PDF document text
    • http://www.aiim.org/pdfa/ns/schema#In PDF document text
    • http://www.aiim.org/pdfa/ns/property#In PDF document text
    • http://www.aiim.org/pdfa/ns/id/In PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.