Malicious PDF — malware analysis report

Static analysis result for SHA-256 6330dba9b7653efb…

MALICIOUS

PDF

33.8 KB Created: 2019-09-18 17:08:42 +03:00 Authoring application: Adobe Acrobat 8.0 Combine Files (via Adobe Acrobat 8.0)
MD5: d5e63d943e646b8eb160f764f2d5f111 SHA-1: 2679cd094adbc2779cca051254f13dfb4129100e SHA-256: 6330dba9b7653efba275e0c954458fecb4ca7c1f4e5094882be09bb13a82412c
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF document was flagged by a machine learning classifier as malicious and contains a large number of embedded external links. The heuristic 'PDF_SEO_LINK_FARM' indicates these links are likely intended for SEO manipulation or to serve as a distribution point for other malicious content. While no scripts were extracted, the sheer volume of links suggests a malicious intent to redirect users to potentially harmful sites.

Machine Learning

  • Nyx PDF Classifier malicious score 0.8015

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.gorillawalker.com/in-a-page-cardiology-in-a-page-series.pdf
    • http://www.gorillawalker.com/fairy-gardens-a-guide-to-growing-an-enchanted-miniature-world.pdf
    • http://www.gorillawalker.com/under-the-same-sky-from-starvation-in-north-korea-to.pdf
    • http://www.gorillawalker.com/m-todos-de-an-lisis-microbiol-gicos-de-los-alimentos.pdf
    • http://www.gorillawalker.com/secrets-of-colombian-cooking-hippocrene-cookbook-library.pdf
    • http://www.gorillawalker.com/toxic-dinoflagellate-blooms-proceedings-of-the-2nd-international-conference-key.pdf
    • http://www.gorillawalker.com/atlas-of-modern-jewish-history-studies-in-jewish-history.pdf
    • http://www.gorillawalker.com/my-sissy-husband-s-training-classes-regina-s-sissy-husband.pdf
    • http://www.gorillawalker.com/making-thanksgiving-traditions.pdf
    • http://www.gorillawalker.com/a-biography-of-edwin-henry-hackley-1859-1940-african-american.pdf
    • http://www.gorillawalker.com/it-s-a-sprawl-world-after-all-the-human-cost.pdf
    • http://www.gorillawalker.com/marine-coastal-and-water-pollutions-focus-wiley.pdf
    • http://www.gorillawalker.com/trailblazer-heroes-heroines-box-set-5-trailblazers.pdf
    • http://www.gorillawalker.com/practicing-therapeutic-jurisprudence.pdf
    • http://www.gorillawalker.com/killing-me-softly-killing-em-softly-volume-1.pdf
    • http://www.gorillawalker.com/sleep-how-to-cure-your-sleep-disorder-unabridged-audible-audio.pdf
    • http://www.gorillawalker.com/the-secret-history-omnibus-volume-3.pdf
    • http://www.gorillawalker.com/fushigi-y-gi-genbu-kaiden-vol-11-fushigi-yugi-genbu.pdf
    • http://www.gorillawalker.com/nature-and-the-environment-critical-insights.pdf
    • http://www.gorillawalker.com/a-love-for-rebecca.pdf
    • http://www.gorillawalker.com/naic-statistical-complilation-of-annual-statement-information-for-property-casualty.pdf
    • http://www.gorillawalker.com/claudette-colvin-twice-toward-justice.pdf
    • http://www.gorillawalker.com/a-southern-adventure-in-free-enterprise-the-story-of-southwire.pdf
    • http://www.gorillawalker.com/paramedic-interview-questions-and-answers-testing-series.pdf
    • http://www.gorillawalker.com/classic-american-airlines.pdf
    • http://www.gorillawalker.com/statistics-for-six-sigma-made-easy-revised-and-expanded-second.pdf
    • http://www.gorillawalker.com/elastic-multibody-dynamics-a-direct-ritz-approach-intelligent-systems-control.pdf
    • http://www.gorillawalker.com/the-magic-of-you-mystical-realms-1-siren-publishing-menage.pdf
    • http://www.gorillawalker.com/vladimir-lenin-leading-lives.pdf
    • http://www.gorillawalker.com/local-money-how-to-make-it-happen-in-your-community.pdf
    • http://www.gorillawalker.com/the-leadership-imperative-technology-adoption-and-strategic-management-in-travel.pdf
    • http://www.gorillawalker.com/adventure-stories-for-8-year-olds.pdf
    • http://www.gorillawalker.com/101-easy-songs-for-trombone.pdf
    • http://www.gorillawalker.com/cambridge-primary-english-stage-1-activity-book-cambridge-international-examinations.pdf
    • http://www.gorillawalker.com/the-gentle-chef-cookbook-vegan-cuisine-for-the-ethical-gourmet.pdf
    • http://www.gorillawalker.com/the-12-bad-habits-that-hold-good-people-back-overcoming.pdf
    • http://www.gorillawalker.com/unseasonable-youth-modernism-colonialism-and-the-fiction-of-development-modernist.pdf
    • http://www.gorillawalker.com/advances-in-imaging-and-electron-physics-volume-182.pdf
    • http://www.gorillawalker.com/morceau-symphonique-solo-trombone-and-concert-band-conductor-score-eighth.pdf
    • http://www.gorillawalker.com/network-theory-in-the-public-sector-building-new-theoretical-frameworks.pdf
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#
    • http://purl.org/dc/elements/1.1/
    • http://ns.adobe.com/xap/1.0/
    • http://ns.adobe.com/pdf/1.3/
    • http://ns.adobe.com/xap/1.0/mm/
    • http://www.aiim.org/pdfa/ns/extension/
    • http://www.aiim.org/pdfa/ns/schema#
    • http://www.aiim.org/pdfa/ns/property#
    • http://www.aiim.org/pdfa/ns/id/

Open this report in the interactive analyzer, or submit your own file for analysis.