Malicious PDF — malware analysis report

Static analysis result for SHA-256 71caed6cc8271674…

MALICIOUS

PDF

42.9 KB Created: 2019-02-14 08:12:20 +03:00 Authoring application: BookVirtual Digital Works (via BookVirtual Corp. Patents Pending.)
MD5: f737214f7b1f1440f2ff0f7377f2001a SHA-1: 9a10ec3471fb9a6a339e501145fd70067af10ad7 SHA-256: 71caed6cc827167448b8b2ecdfc1c99c707df0a25007c299fbfe1489bfebb547
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded links pointing to external PDF files on the domain 'gorillawalker.com'. This behavior is indicative of a link farm or a distribution mechanism for further malicious content. The ML classifier also flagged this PDF as malicious.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9027

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.gorillawalker.com/wife-bets-it-all-on-black-cheating-wife-gambling-with.pdf
    • http://www.gorillawalker.com/faqs-all-about-vitamins-freqently-asked-questions.pdf
    • http://www.gorillawalker.com/the-iceman-cometh-limited-edition-signed.pdf
    • http://www.gorillawalker.com/erotic-surrender-the-sensual-joys-of-female-submission.pdf
    • http://www.gorillawalker.com/the-orphan-of-awkward-falls.pdf
    • http://www.gorillawalker.com/constants-in-some-inequalities-of-analysis.pdf
    • http://www.gorillawalker.com/twenty-10-minute-plays-for-teens-volume-i-young-actors.pdf
    • http://www.gorillawalker.com/foundations-for-success-bassoon.pdf
    • http://www.gorillawalker.com/the-traditional-bowyer-s-bible-vol-2.pdf
    • http://www.gorillawalker.com/tricksters-the.pdf
    • http://www.gorillawalker.com/the-winter-king-a-hawkenlye-13th-century-british-mystery-a.pdf
    • http://www.gorillawalker.com/california-framwork-test-prep-resources-guide-high-school-mathematics.pdf
    • http://www.gorillawalker.com/saadi-the-divan.pdf
    • http://www.gorillawalker.com/west-wind-poems-and-prose-poems.pdf
    • http://www.gorillawalker.com/vigilance-theory-operational-performance-and-physiological-correlates-nato-conference-series.pdf
    • http://www.gorillawalker.com/nourishment-feeding-my-starving-soul-when-my-mind-and-body.pdf
    • http://www.gorillawalker.com/the-women-s-code-presents-happy-woman-happy-world.pdf
    • http://www.gorillawalker.com/cognitive-psychology-theory-process-and-methodology.pdf
    • http://www.gorillawalker.com/fairy-tail.pdf
    • http://www.gorillawalker.com/joey-pigza-swallowed-the-key-joey-pigza-books.pdf
    • http://www.gorillawalker.com/p-c-stocks-can-improve-p-e-ratios-property-casualty.pdf
    • http://www.gorillawalker.com/the-end-of-religion-the-beginning-of-self-using-the.pdf
    • http://www.gorillawalker.com/rome-and-china-comparative-perspectives-on-ancient-world-empires-oxford.pdf
    • http://www.gorillawalker.com/broken-angels-eve-of-light-book-i-volume-1.pdf
    • http://www.gorillawalker.com/lung-cancer-webster-s-timeline-history-1830-1997-download-pdf.pdf
    • http://www.gorillawalker.com/master-therapists-exploring-expertise-in-therapy-and-counseling.pdf
    • http://www.gorillawalker.com/artificial-intelligence-science-foundations.pdf
    • http://www.gorillawalker.com/french-regional-food.pdf
    • http://www.gorillawalker.com/an-annotated-bibliography-of-bibliographies-of-statutory-materials-of-the.pdf
    • http://www.gorillawalker.com/internet-joke-book-loads-of-witty-satire-oh-and-jokes.pdf
    • http://www.gorillawalker.com/open-the-barn-door-a-chunky-book-r.pdf
    • http://www.gorillawalker.com/the-dendrobiums.pdf
    • http://www.gorillawalker.com/werewolf-the-forsaken-dice-set.pdf
    • http://www.gorillawalker.com/designed-polymers-by-carbocationic-macromolecular-engineering-theory-and-practice.pdf
    • http://www.gorillawalker.com/cantwell-v-state-of-connecticut-u-s-supreme-court-transcript.pdf
    • http://www.gorillawalker.com/summit-1-workbook.pdf
    • http://www.gorillawalker.com/the-laundry-list-the-acoa-adult-children-of-alcoholics-experience.pdf
    • http://www.gorillawalker.com/lonely-planet-lonely-planet-travel-guide-series-laos-chinese-edition.pdf
    • http://www.gorillawalker.com/stop-go-safety.pdf
    • http://www.gorillawalker.com/traumatic-brain-injury-and-neuropsychological-impairment-sensorimotor-cognitive-emotional-and.pdf
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#
    • http://purl.org/dc/elements/1.1/
    • http://ns.adobe.com/xap/1.0/
    • http://ns.adobe.com/pdf/1.3/
    • http://ns.adobe.com/xap/1.0/mm/
    • http://www.aiim.org/pdfa/ns/extension/
    • http://www.aiim.org/pdfa/ns/schema#
    • http://www.aiim.org/pdfa/ns/property#
    • http://www.aiim.org/pdfa/ns/id/

Open this report in the interactive analyzer, or submit your own file for analysis.