Malicious PDF — malware analysis report

Static analysis result for SHA-256 80cc099976c7a270…

MALICIOUS

PDF

33.2 KB Created: 2019-09-19 14:04:11 +03:00 Authoring application: FrameMaker 7.1 (via Acrobat Distiller 7.0.5 (Windows))
MD5: 9a450fcedf97b2dcd0630a9ca217f993 SHA-1: fff98de19020036c832db96465a471e6a50caaa9 SHA-256: 80cc099976c7a2701fd25a6ca516e1de03821f85209f3467f0edc6f4beec6747
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded links to external PDF files, as indicated by the PDF_SEO_LINK_FARM heuristic. These links all point to the same domain, suggesting a coordinated effort to manipulate search engine results or distribute content. No scripts were extracted from this sample, and the document body was heavily obfuscated and unreadable.

Machine Learning

  • Nyx PDF Classifier malicious score 0.8529

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.gorillawalker.com/battle-of-britain-the-movie.pdf
    • http://www.gorillawalker.com/by-lonely-planet-lonely-planet-south-africa-lesotho-swaziland-travel.pdf
    • http://www.gorillawalker.com/the-gondoliers-act-i-quartette-from-the-sunny-spanish-shore.pdf
    • http://www.gorillawalker.com/gospel-gems-from-the-old-testament-kindle-edition.pdf
    • http://www.gorillawalker.com/an-erotic-trilogy-2-the-lost-weekend-a-bruising-encounter.pdf
    • http://www.gorillawalker.com/the-republic-of-pirates-being-the-true-and-surprising-story.pdf
    • http://www.gorillawalker.com/gre-test-prep-advanced-vocabulary-review-flashcards-gre-study-guide.pdf
    • http://www.gorillawalker.com/using-sources-effectively-strengthening-your-writing-and-avoiding-plagiarism.pdf
    • http://www.gorillawalker.com/el-ni-o-con-los-panes-y-los-peces-historias.pdf
    • http://www.gorillawalker.com/learn-to-finger-spell-how-to-finger-spell-the-british.pdf
    • http://www.gorillawalker.com/a-concise-history-of-the-catholic-church.pdf
    • http://www.gorillawalker.com/computer-networks-fifth-edition-a-systems-approach-the-morgan-kaufmann.pdf
    • http://www.gorillawalker.com/memoirs-of-a-dutiful-daughter-perennial-classics.pdf
    • http://www.gorillawalker.com/class-states-and-international-relations-a-critical-appraisal-of-robert.pdf
    • http://www.gorillawalker.com/better-homes-and-gardens-after-school-cooking.pdf
    • http://www.gorillawalker.com/cognitive-behavioral-therapy-in-groups.pdf
    • http://www.gorillawalker.com/silent-statements-beihefte-zur-zeitschrift-fur-die-neutestamentliche-wissenschaft-und.pdf
    • http://www.gorillawalker.com/alice-s-adventures-in-wonderland-board-book.pdf
    • http://www.gorillawalker.com/elvis-after-elvis-the-posthumous-career-of-a-living-legend.pdf
    • http://www.gorillawalker.com/the-purpose-of-life-islamic-books-on-the-quran-the.pdf
    • http://www.gorillawalker.com/discrete-optimization-algorithms-with-pascal-programs-dover-books-on-computer.pdf
    • http://www.gorillawalker.com/god-and-caesar-troeltsch-s-social-teaching-as-legitimation.pdf
    • http://www.gorillawalker.com/the-real-jane-austen-a-life-in-small-things.pdf
    • http://www.gorillawalker.com/blood-sand-and-betrayal-struggles-and-triumphs.pdf
    • http://www.gorillawalker.com/love-on-a-spring-morning.pdf
    • http://www.gorillawalker.com/freedomnomics-why-the-free-market-works-and-freaky-theories-don.pdf
    • http://www.gorillawalker.com/lust-violence-religion-life-in-historic-waco.pdf
    • http://www.gorillawalker.com/polymer-extrusion.pdf
    • http://www.gorillawalker.com/regulation-of-lawyers-problems-of-law-ethics-9th-edition.pdf
    • http://www.gorillawalker.com/eating-disorders-overeating-and-pathological-attachment-to-food-independent-or.pdf
    • http://www.gorillawalker.com/saved-by-the-werelion-bbw-werelion-alpha-pack-shifter-pregnancy.pdf
    • http://www.gorillawalker.com/inventing-the-future-the-scientists-who-changed-our-world.pdf
    • http://www.gorillawalker.com/the-lost-bellybutton.pdf
    • http://www.gorillawalker.com/futurity-contemporary-literature-and-the-quest-for-the-past.pdf
    • http://www.gorillawalker.com/managerial-accounting-a-focus-on-ethical-decision-making-available-titles.pdf
    • http://www.gorillawalker.com/hermano-sol-hermana-luna-la-historia-de-san-francisco.pdf
    • http://www.gorillawalker.com/confucian-of-china-traditional-chinese-edition-the-introduction-of-four.pdf
    • http://www.gorillawalker.com/the-philosophy-of-the-commentators-200-600-ad-a-sourcebook.pdf
    • http://www.gorillawalker.com/non-small-cell-lung-cancer-nccn-clinical-practice-guidelines-in.pdf
    • http://www.gorillawalker.com/junaid-in-lahore-beans.pdf
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#
    • http://purl.org/dc/elements/1.1/
    • http://ns.adobe.com/xap/1.0/
    • http://ns.adobe.com/pdf/1.3/
    • http://ns.adobe.com/xap/1.0/mm/
    • http://www.aiim.org/pdfa/ns/extension/
    • http://www.aiim.org/pdfa/ns/schema#
    • http://www.aiim.org/pdfa/ns/property#
    • http://www.aiim.org/pdfa/ns/id/

Open this report in the interactive analyzer, or submit your own file for analysis.