Malicious PDF — malware analysis report

Static analysis result for SHA-256 763f8ca2217f6300…

MALICIOUS

PDF

40.7 KB Created: 2019-03-17 11:09:38 +03:00 Authoring application: -
MD5: 55f71eaf58c9bef01038d90247f1eb06 SHA-1: bf8696ea36fe65bf6835ad0bb54375a8e6f61f38 SHA-256: 763f8ca2217f6300112cde8568dc0e3860ee1d33f76339ca639546f5203f0923
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF was flagged by a machine learning classifier as malicious and contains a large number of embedded URLs pointing to other PDF files. This suggests a link farm or redirection scheme designed to lead users to potentially harmful content, likely as part of a phishing or spam campaign.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9181

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.gorillawalker.com/stratigraphic-reservoir-characterization-for-petroleum-geologists-geophysicists-and-engineers-volume.pdf
    • http://www.gorillawalker.com/theories-and-themes.pdf
    • http://www.gorillawalker.com/silent-night-satb-vocal-score.pdf
    • http://www.gorillawalker.com/colon-cancer-current-and-emerging-trends-in-detection-and-treatment.pdf
    • http://www.gorillawalker.com/an-unauthorized-guide-to-bloodline-kyle-chandler-stars-in-the.pdf
    • http://www.gorillawalker.com/a-shade-of-vampire-8-a-shade-of-kiev-volume.pdf
    • http://www.gorillawalker.com/self-science-the-emotional-intelligence-curriculum.pdf
    • http://www.gorillawalker.com/thriller-you-are-mine-murder-darkness-suspense-thriller-twisted-plot.pdf
    • http://www.gorillawalker.com/the-human-tutorial-dialogue-project-issues-in-the-design-of.pdf
    • http://www.gorillawalker.com/a-season-in-hell-and-the-drunken-boat.pdf
    • http://www.gorillawalker.com/i-kissed-dating-goodbye-a-new-attitude-toward-relationships-and.pdf
    • http://www.gorillawalker.com/his-for-the-night.pdf
    • http://www.gorillawalker.com/yinyang-the-way-of-heaven-and-earth-in-chinese-thought.pdf
    • http://www.gorillawalker.com/visualizing-environmental-science.pdf
    • http://www.gorillawalker.com/cellular-and-molecular-biology-of-filamentous-fungi.pdf
    • http://www.gorillawalker.com/musical-theatre-for-classical-singers-soprano.pdf
    • http://www.gorillawalker.com/encyclopedia-of-bioethics-vol-5-3rd-edition.pdf
    • http://www.gorillawalker.com/syllabus-of-dermatologic-histopathology.pdf
    • http://www.gorillawalker.com/jingle-bell-blessings-love-inspired.pdf
    • http://www.gorillawalker.com/arcane-power-swordmage-1-power-cards-a-d-d-accessory.pdf
    • http://www.gorillawalker.com/franz-schubert-rosamunde-overture-op-6-no-39-kalmus-miniature.pdf
    • http://www.gorillawalker.com/recovering-the-commons-democracy-place-and-global-justice.pdf
    • http://www.gorillawalker.com/pmp-prep-quizzes-answer-the-questions-before-they-are-asked.pdf
    • http://www.gorillawalker.com/conoce-a-gabriela-mistral-get-to-know-gabriela-mistral-personajes.pdf
    • http://www.gorillawalker.com/wisdom-s-wonder-character-creation-and-crisis-in-the-bible.pdf
    • http://www.gorillawalker.com/justus-von-liebig-the-chemical-gatekeeper-cambridge-science-biographies.pdf
    • http://www.gorillawalker.com/innovations-in-power-systems-reliability-springer-series-in-reliability-engineering.pdf
    • http://www.gorillawalker.com/national-geographic-traveler-thailand-3rd-edition.pdf
    • http://www.gorillawalker.com/code-generation-in-action.pdf
    • http://www.gorillawalker.com/medieval-woman-calendar-1998.pdf
    • http://www.gorillawalker.com/bosnia-serbia-and-montenegro-travel-guide-bosniya-serbiya-i-chernogoriya.pdf
    • http://www.gorillawalker.com/hard-times-victorian.pdf
    • http://www.gorillawalker.com/nursing-case-studies-in-caring.pdf
    • http://www.gorillawalker.com/american-dental-hygienists-association-national-dental-hygiene-research-agenda-revised.pdf
    • http://www.gorillawalker.com/vanishing-grace-what-ever-happened-to-the-good-news.pdf
    • http://www.gorillawalker.com/elements-of-group-theory-for-physicists.pdf
    • http://www.gorillawalker.com/the-first-encounter-princeton-legacy-library.pdf
    • http://www.gorillawalker.com/children-s-atlas-of-exploration.pdf
    • http://www.gorillawalker.com/ein-halber-kollege-erotische-liebesgeschichte-ded-by-rabengut-3-german.pdf
    • http://www.gorillawalker.com/powers-that-be.pdf
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#
    • http://purl.org/dc/elements/1.1/
    • http://ns.adobe.com/xap/1.0/
    • http://ns.adobe.com/pdf/1.3/
    • http://ns.adobe.com/xap/1.0/mm/
    • http://www.aiim.org/pdfa/ns/extension/
    • http://www.aiim.org/pdfa/ns/schema#
    • http://www.aiim.org/pdfa/ns/property#
    • http://www.aiim.org/pdfa/ns/id/

Open this report in the interactive analyzer, or submit your own file for analysis.