Malicious PDF — malware analysis report

Static analysis result for SHA-256 83df71fc02fac55c…

MALICIOUS

PDF

44.4 KB Created: 2019-04-05 19:10:50 +03:00 Authoring application: Adobe PageMaker 6.5 (via Acrobat Distiller 3.0 for Windows)
MD5: 5cc4bde2652ac3121d42649e420aee8e SHA-1: 30d6dfd4c83456316a3764cb6b8dc5556766d7a8 SHA-256: 83df71fc02fac55c8143637a6f85373f7d85aa433b1d7c92106f7a2646ed71a6
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF file was flagged by a machine learning classifier as malicious and contains a large number of embedded external links, characteristic of a link farm or SEO spam. The primary heuristic indicates a "PDF_SEO_LINK_FARM" with 32 external links, suggesting the document's purpose is to distribute these links. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9007

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.gorillawalker.com/blade-kayak-fishing-magazine-number-11-2013.pdf
    • http://www.gorillawalker.com/hockey-register-every-player-every-stat.pdf
    • http://www.gorillawalker.com/malcolm-finney-medical-detective-the-case-of-itch-and-rash.pdf
    • http://www.gorillawalker.com/warman-s-roseville-pottery-identification-and-price-guide-vol-i.pdf
    • http://www.gorillawalker.com/mel-bay-trumpet-fingering-chart.pdf
    • http://www.gorillawalker.com/the-mirror-of-literature-amusement-and-instruction-volume-19-no.pdf
    • http://www.gorillawalker.com/personality-disorders-clinical-and-social-perspectives-assessment-and-treatment-based.pdf
    • http://www.gorillawalker.com/the-material-of-invention-materials-and-design.pdf
    • http://www.gorillawalker.com/when-am-i-going-to-be-happy-how-to-break.pdf
    • http://www.gorillawalker.com/insight-guides-texas-insight-guide-texas.pdf
    • http://www.gorillawalker.com/50-activities-for-coaching-mentoring-50-activities-series.pdf
    • http://www.gorillawalker.com/the-unmaking-of-gough-kindle-edition.pdf
    • http://www.gorillawalker.com/enigmas-the-egyptian-moment-in-art-and-society.pdf
    • http://www.gorillawalker.com/nez-perce-country-bison-original.pdf
    • http://www.gorillawalker.com/great-latin-favorites-solos-duets-and-trios-with-piano-accompaniment.pdf
    • http://www.gorillawalker.com/knight-quest-hologramatic-sticker-book.pdf
    • http://www.gorillawalker.com/become-a-genius-secrets-to-increase-your-brain-power-speed.pdf
    • http://www.gorillawalker.com/long-island-airports-ny-images-of-america.pdf
    • http://www.gorillawalker.com/the-umbrella-thief.pdf
    • http://www.gorillawalker.com/flores-ciegas-spanish-edition.pdf
    • http://www.gorillawalker.com/workin-146-on-the-railroad-reminiscences-from-the-age-of.pdf
    • http://www.gorillawalker.com/social-theory-essential-readings.pdf
    • http://www.gorillawalker.com/innovation-transformation-and-war-counterinsurgency-operations-in-anbar-and-ninewa.pdf
    • http://www.gorillawalker.com/the-household-of-god-the-social-world-of-the-pastoral.pdf
    • http://www.gorillawalker.com/dungeoneer-s-survival-guide-official-advanced-dungeons-dragons.pdf
    • http://www.gorillawalker.com/el-mercado-de-afores-propuestas-para-reducir-los-riesgos-de.pdf
    • http://www.gorillawalker.com/bioinformatics-converting-data-to-knowledge-workshop-summary.pdf
    • http://www.gorillawalker.com/childrens-books-i-wish-i-had-visited-saint-basil-s.pdf
    • http://www.gorillawalker.com/6-la-qu-te-des-ours-french-edition.pdf
    • http://www.gorillawalker.com/the-third-reconstruction-moral-mondays-fusion-politics-and-the-rise.pdf
    • http://www.gorillawalker.com/the-royal-mummies-duckworth-egyptology.pdf
    • http://www.gorillawalker.com/ave-sanctissima-maria-score-parts-eighth-note-publications.pdf
    • http://www.gorillawalker.com/summary-the-now-habit-neil-fiore-a-strategic-program-for.pdf
    • http://www.gorillawalker.com/mango-sudden-decline-investigation-of-fungi-associated-with-mango-sudden.pdf
    • http://www.gorillawalker.com/power-politics-in-zimbabwe.pdf
    • http://www.gorillawalker.com/community-health-in-the-21st-century-2nd-edition.pdf
    • http://www.gorillawalker.com/the-youth-of-things-life-and-death-in-the-age.pdf
    • http://www.gorillawalker.com/schaum-s-outline-of-vector-analysis-2nd-second-edition-text.pdf
    • http://www.gorillawalker.com/biscuits-cookies-and-crackers-biscuits-cookies-crackers.pdf
    • http://www.gorillawalker.com/hvordan-tegne-sj.pdf
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#
    • http://purl.org/dc/elements/1.1/
    • http://ns.adobe.com/xap/1.0/
    • http://ns.adobe.com/pdf/1.3/
    • http://ns.adobe.com/xap/1.0/mm/
    • http://www.aiim.org/pdfa/ns/extension/
    • http://www.aiim.org/pdfa/ns/schema#
    • http://www.aiim.org/pdfa/ns/property#
    • http://www.aiim.org/pdfa/ns/id/

Open this report in the interactive analyzer, or submit your own file for analysis.