Malicious PDF — malware analysis report

Static analysis result for SHA-256 6716f2269e3e5427…

MALICIOUS

PDF

48.6 KB Created: 2018-12-28 08:08:49 +03:00 Authoring application: Adobe PageMaker 6.52 (via Acrobat Distiller 3.01 for Windows)
MD5: 6df47631ddeee974599114a7a120ec92 SHA-1: 102745ecc14148daeb218126410d568916786837 SHA-256: 6716f2269e3e54276c28309de7ae2687bede0a502cf78fafc89698744932208c
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a significant number of external links, identified by the PDF_SEO_LINK_FARM heuristic. This suggests the document's primary purpose is to act as a link farm, potentially for SEO manipulation or to distribute further malicious content. The ML classifier also flagged this PDF as malicious with a high probability. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.8509

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.gorillawalker.com/voodoo-faust-libretto-songtexte-und-acht-zeichnungen-german-edition.pdf
    • http://www.gorillawalker.com/sport-and-tourism-introductory-report.pdf
    • http://www.gorillawalker.com/frommer-s-comprehensive-travel-guide-chicago-95.pdf
    • http://www.gorillawalker.com/where-women-create-business-volume-1-issue-2-summer-2013.pdf
    • http://www.gorillawalker.com/my-life-my-legacy-a-timeless-portrait-of-who-you.pdf
    • http://www.gorillawalker.com/rehabilitation-nursing-procedures-manual-2-e.pdf
    • http://www.gorillawalker.com/the-goose-and-the-gander.pdf
    • http://www.gorillawalker.com/machine-learning-and-data-mining-in-pattern-recognition-10th-international.pdf
    • http://www.gorillawalker.com/collector-s-guide-to-barbie-exclusives-identification-and-values-featuring.pdf
    • http://www.gorillawalker.com/revealing-the-hidden-nature-of-space-and-time-charting-the.pdf
    • http://www.gorillawalker.com/startup-guide-to-internet-broadcasting-learn-how-to-start-our.pdf
    • http://www.gorillawalker.com/the-federal-circuit-a-judicial-innovation-establishing-a-us-court.pdf
    • http://www.gorillawalker.com/managing-customer-relationships-a-strategic-framework.pdf
    • http://www.gorillawalker.com/the-hidden-treasure-or-the-value-and-excellence-of-holy.pdf
    • http://www.gorillawalker.com/best-loved-bible-stories-book-and-giant-floor-puzzle.pdf
    • http://www.gorillawalker.com/dynamical-processes-in-condensed-molecular-systems-proceedings-of-the-emil.pdf
    • http://www.gorillawalker.com/knives-and-swords.pdf
    • http://www.gorillawalker.com/eloquent-animals-a-study-in-animal-communications-how-chimps-lie.pdf
    • http://www.gorillawalker.com/battletech-26-hearts-of-chaos-vol-26.pdf
    • http://www.gorillawalker.com/antolog-a-de-cuentos-hispanoamericanos-punto-de-encuentro-editorial-everest.pdf
    • http://www.gorillawalker.com/introductory-and-intermediate-algebra-texas-edition-concepts-and-graphs-series.pdf
    • http://www.gorillawalker.com/the-brook-kerith-a-syrian-story.pdf
    • http://www.gorillawalker.com/break-me-the-obsession-series-book-2-kindle-edition.pdf
    • http://www.gorillawalker.com/ka-po-e-kahiko-o-wai-anae-oral-histories-of.pdf
    • http://www.gorillawalker.com/traveler-s-guide-to-camping-mexico-s-baja-explore-baja.pdf
    • http://www.gorillawalker.com/the-expressiveness-of-perceptual-experience-physiognomy-reconsidered-consciousness-emotion-book.pdf
    • http://www.gorillawalker.com/psychological-consultation-and-collaboration-in-school-and-community-settings-school.pdf
    • http://www.gorillawalker.com/transportation-point-fall-2011-kindle-edition.pdf
    • http://www.gorillawalker.com/como-hacer-tu-primer-trabajo-de-investigacion-guia-para-investigadores.pdf
    • http://www.gorillawalker.com/kat-s-cherry-the-big-easy-series-book-2.pdf
    • http://www.gorillawalker.com/images-and-ideas-in-modern-french-piano-music-the-extra.pdf
    • http://www.gorillawalker.com/top-45-popular-healthy-sandwich-recipes-for-vegan-and-non.pdf
    • http://www.gorillawalker.com/the-waiting-the-true-story-of-a-lost-child-a.pdf
    • http://www.gorillawalker.com/in-her-neighbor-s-bed.pdf
    • http://www.gorillawalker.com/corporate-director-s-guidebook.pdf
    • http://www.gorillawalker.com/kaplan-pmbr-finals-remedies-core-concepts-and-key-questions-kaplan.pdf
    • http://www.gorillawalker.com/das-opfer-der-langweile-zweisprachige-ausgabe-german-edition.pdf
    • http://www.gorillawalker.com/sherwood-music-school-piano-course-grade-preparatory-a-composition-110.pdf
    • http://www.gorillawalker.com/value-seeker-the-betting-system.pdf
    • http://www.gorillawalker.com/special-plans-the-blogs-on-douglas-feith-the-faulty-intelligence.pdf
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#
    • http://purl.org/dc/elements/1.1/
    • http://ns.adobe.com/xap/1.0/
    • http://ns.adobe.com/pdf/1.3/
    • http://ns.adobe.com/xap/1.0/mm/
    • http://www.aiim.org/pdfa/ns/extension/
    • http://www.aiim.org/pdfa/ns/schema#
    • http://www.aiim.org/pdfa/ns/property#
    • http://www.aiim.org/pdfa/ns/id/

Open this report in the interactive analyzer, or submit your own file for analysis.