Malicious PDF — malware analysis report

Static analysis result for SHA-256 93369fccee78a7bb…

MALICIOUS

PDF

34.1 KB Created: 2019-12-13 08:54:01 +03:00 Authoring application: Adobe Acrobat 6.02 (via Adobe Acrobat 6.0)
MD5: 1c0ca4fe8b3c1d8c4da0c8e2ca9d12e4 SHA-1: 1eae2cb6ce143c04e03669d8584c124717e2da96 SHA-256: 93369fccee78a7bbe2a41c013277f2cbe19874100a5480e8e2458e901e2356bd
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1204.002 Malicious Link

The PDF contains a large number of embedded URLs pointing to external PDF files on the domain 'gorillawalker.com'. This behavior is indicative of a link farm, often used for SEO manipulation or to distribute malicious content. The ML classifier also flagged this PDF as malicious with a high probability. No scripts were extracted, and the document body was not readable.

Machine Learning

  • Nyx PDF Classifier malicious score 0.8313

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.gorillawalker.com/fundamentals-of-computational-geoscience-numerical-methods-and-algorithms-lecture-notes.pdf
    • http://www.gorillawalker.com/frida-kahlo-the-great-hispanic-heritage.pdf
    • http://www.gorillawalker.com/legendary-divas-of-swing-jazz-piano-vocal-chords.pdf
    • http://www.gorillawalker.com/the-impossible-hero-a-biography-of-gordon-puff-puff-pirie.pdf
    • http://www.gorillawalker.com/schools-under-surveillance-cultures-of-control-in-public-education-critical.pdf
    • http://www.gorillawalker.com/fridthjof-s-saga-a-norse-romance-classic-reprint.pdf
    • http://www.gorillawalker.com/mel-bay-presents-ukulele-christmas-songbook.pdf
    • http://www.gorillawalker.com/new-orleans-jazz-fest-a-pictorial-history.pdf
    • http://www.gorillawalker.com/maddie-book-8-maddie-drives-us-mad-the-adventures-of.pdf
    • http://www.gorillawalker.com/frank-marshall-united-states-chess-champion-a-biography-with-220.pdf
    • http://www.gorillawalker.com/fisheries-management-of-mexican-and-central-american-estuaries-estuaries-of.pdf
    • http://www.gorillawalker.com/the-lost-tomb-of-viracocha-unlocking-the-secrets-of-the.pdf
    • http://www.gorillawalker.com/paint-along-with-jerry-yarnell-volume-three-painting-magic.pdf
    • http://www.gorillawalker.com/diagnostic-imaging-oncology-published-by-amirsys.pdf
    • http://www.gorillawalker.com/movie-duets-for-all-viola-instrumental-ensembles-for-all.pdf
    • http://www.gorillawalker.com/cats-and-dogs-unleashed-pets-with-attitude.pdf
    • http://www.gorillawalker.com/modewarre-home-ground.pdf
    • http://www.gorillawalker.com/a-fem-s-playground-kindle-edition.pdf
    • http://www.gorillawalker.com/strength-training-for-teen-athletes-exercises-to-take-your-game.pdf
    • http://www.gorillawalker.com/physiological-fruit-tree-training-for-intensive-growing.pdf
    • http://www.gorillawalker.com/she-s-not-coming-home.pdf
    • http://www.gorillawalker.com/the-battery-vol07-remastering-version-japanese-edition-kindle-edition.pdf
    • http://www.gorillawalker.com/advanced-terrain-modelling-modelling-masterclass.pdf
    • http://www.gorillawalker.com/acute-pain-management-operative-or-medical-procedures-and-trauma.pdf
    • http://www.gorillawalker.com/textile-technology.pdf
    • http://www.gorillawalker.com/johann-sebastian-bach-flute-sonata-in-b-minor-bwv-1030.pdf
    • http://www.gorillawalker.com/notorious-an-it-girl-novel-the-it-girl-series.pdf
    • http://www.gorillawalker.com/for-europe.pdf
    • http://www.gorillawalker.com/a-complete-history-of-american-comic-books-english-and-english.pdf
    • http://www.gorillawalker.com/materials-for-inspirational-design.pdf
    • http://www.gorillawalker.com/the-abingdon-worship-planning-calendar-2003.pdf
    • http://www.gorillawalker.com/seals-nature-s-children-children-s-press-paperback.pdf
    • http://www.gorillawalker.com/legislative-drafter-s-desk-reference-2nd-ed.pdf
    • http://www.gorillawalker.com/annual-report-by-the-secretary-of-state-for-social-security.pdf
    • http://www.gorillawalker.com/the-everything-filmmaking-book-from-script-to-premiere-a-complete.pdf
    • http://www.gorillawalker.com/the-voynich-cypher-cryptology-conspiracy-intrigue-thriller-kindle-edition.pdf
    • http://www.gorillawalker.com/thunder-in-the-glens-jacobite-rebellion-dragon-real-life-game.pdf
    • http://www.gorillawalker.com/rosemary-and-rue-october-daye.pdf
    • http://www.gorillawalker.com/shih-tzu-2015-pocket-planner-multilingual-edition.pdf
    • http://www.gorillawalker.com/duo-concertante-for-violin-and-viola-john-williams-signature-edition.pdf
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#
    • http://purl.org/dc/elements/1.1/
    • http://ns.adobe.com/xap/1.0/
    • http://ns.adobe.com/pdf/1.3/
    • http://ns.adobe.com/xap/1.0/mm/
    • http://www.aiim.org/pdfa/ns/extension/
    • http://www.aiim.org/pdfa/ns/schema#
    • http://www.aiim.org/pdfa/ns/property#
    • http://www.aiim.org/pdfa/ns/id/

Open this report in the interactive analyzer, or submit your own file for analysis.