Malicious PDF — malware analysis report

Static analysis result for SHA-256 780371600f60fb0d…

MALICIOUS

PDF

45.9 KB Created: 2018-11-14 08:36:52 +03:00 Authoring application: Adobe InDesign CC (Macintosh) (via Adobe PDF Library 11.0) First seen: 2018-11-20
MD5: 4f53f7b2f851673ef2b1e4815f584894 SHA-1: a67836ede779a05b1a63d51efa15b495a777706a SHA-256: 780371600f60fb0d248a19ef782465990e0e2b0f66deb0ee19378489250599e3
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded links to external PDF files, as indicated by the PDF_SEO_LINK_FARM heuristic. The ML classifier also flagged the document as malicious. The primary purpose appears to be SEO manipulation or potentially distributing further malicious content through these links.

Machine Learning

  • Nyx PDF Classifier malicious score 0.8173

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.gorillawalker.com/by-gayle-rosenwald-smith-j-d-what-every-woman-should.pdf In PDF document text
    • http://www.gorillawalker.com/365-dogs-2014-page-a-day-calendar.pdfIn PDF document text
    • http://www.gorillawalker.com/starting-an-ebay-business-for-dummies-abridged-audible-audio-edition.pdfIn PDF document text
    • http://www.gorillawalker.com/a-perceforest-reader-selected-episodes-from-perceforest-the-prehistory-of.pdfIn PDF document text
    • http://www.gorillawalker.com/haiku-love.pdfIn PDF document text
    • http://www.gorillawalker.com/festival-waltzes-wein-weib-und-gesang-wine-women-and-song.pdfIn PDF document text
    • http://www.gorillawalker.com/the-new-hunter-s-encyclopedia.pdfIn PDF document text
    • http://www.gorillawalker.com/a-mountain-in-the-wind-an-exploration-of-the-spirituality.pdfIn PDF document text
    • http://www.gorillawalker.com/chinese-medical-association-zyyxht175-2010-chinese-health-care-technology-practices.pdfIn PDF document text
    • http://www.gorillawalker.com/greek-epigram-in-reception-j-a-symonds-oscar-wilde-and.pdfIn PDF document text
    • http://www.gorillawalker.com/precalculus-with-trigonometry-and-analytical-geometry-solution-key.pdfIn PDF document text
    • http://www.gorillawalker.com/colonial-sunset-republican-dawn-one-family-s-experiences-during-the.pdfIn PDF document text
    • http://www.gorillawalker.com/the-north-light-illustrated-book-of-watercolor-techniques.pdfIn PDF document text
    • http://www.gorillawalker.com/meditation-the-first-and-last-freedom.pdfIn PDF document text
    • http://www.gorillawalker.com/ohst-exam-secrets-study-guide-ohst-test-review-for-the.pdfIn PDF document text
    • http://www.gorillawalker.com/online-marketing-for-your-craft-business-how-to-get-your.pdfIn PDF document text
    • http://www.gorillawalker.com/water-droplets-to-nanotechnology-a-journey-through-self-assembly.pdfIn PDF document text
    • http://www.gorillawalker.com/the-new-left-a-history.pdfIn PDF document text
    • http://www.gorillawalker.com/der-wanderer-die-g-tterkriege-6-german-edition.pdfIn PDF document text
    • http://www.gorillawalker.com/seattle-quake-9-2-a-jackie-harlan-mystery-volume-1.pdfIn PDF document text
    • http://www.gorillawalker.com/great-piano-solos-purple-edition.pdfIn PDF document text
    • http://www.gorillawalker.com/bs-3939-1-1986-graphical-symbols-for-electrical-power-telecommunications.pdfIn PDF document text
    • http://www.gorillawalker.com/forecast-scheduling-with-microsoft-project-2010.pdfIn PDF document text
    • http://www.gorillawalker.com/simple-propagation-a-book-of-instructions-for-propagation-by-seed.pdfIn PDF document text
    • http://www.gorillawalker.com/from-brown-to-bakke-the-supreme-court-and-school-integration.pdfIn PDF document text
    • http://www.gorillawalker.com/soil-erosion-and-how-to-prevent-it-everybody-digs-soil.pdfIn PDF document text
    • http://www.gorillawalker.com/restraint-kinbaku-photo-book-kindle-edition.pdfIn PDF document text
    • http://www.gorillawalker.com/how-to-get-into-the-top-mba-programs-6th-editon.pdfIn PDF document text
    • http://www.gorillawalker.com/painting-in-watercolor.pdfIn PDF document text
    • http://www.gorillawalker.com/fundamentals-of-limnology-translated-from-the-german-by-d-f.pdfIn PDF document text
    • http://www.gorillawalker.com/turntable-illusions-kinetic-optical-illusions-for-your-record-turntable.pdfIn PDF document text
    • http://www.gorillawalker.com/military-aircraft-visual-encyclopedia-more-than-1000-color-illustrations.pdfIn PDF document text
    • http://www.gorillawalker.com/the-church-contours-of-christian-theology.pdfIn PDF document text
    • http://www.gorillawalker.com/cultural-histories-of-sociabilities-spaces-and-mobilities-studies-for-the.pdfIn PDF document text
    • http://www.gorillawalker.com/foundations-for-orthodox-christian-education.pdfIn PDF document text
    • http://www.gorillawalker.com/the-haider-phenomenon.pdfIn PDF document text
    • http://www.gorillawalker.com/solar-cells-operating-principles-technology-and-system-applications-prentice-hall.pdfIn PDF document text
    • http://www.gorillawalker.com/technen-elements-of-recent-history-of-information-technologies-with-epistemological.pdfIn PDF document text
    • http://www.gorillawalker.com/rotunda-s-legal-ethics-in-a-nutshell-4th.pdfIn PDF document text
    • http://www.gorillawalker.com/the-sacred-wu-tai-shan-in-connection-with-modern-travel.pdfIn PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text
    • http://www.aiim.org/pdfa/ns/extension/In PDF document text
    • http://www.aiim.org/pdfa/ns/schema#In PDF document text
    • http://www.aiim.org/pdfa/ns/property#In PDF document text
    • http://www.aiim.org/pdfa/ns/id/In PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.