Malicious PDF — malware analysis report

Static analysis result for SHA-256 9f7da4dbc2ce36c3…

MALICIOUS

PDF

45.3 KB Created: 2019-01-06 08:24:23 +03:00 Authoring application: Adobe InDesign CC (Macintosh) (via Adobe PDF Library 11.0)
MD5: 59ec8c4e28465d1aefd5ff104c888bb8 SHA-1: 096bc159493ed1ee45c8e8c83b28dd89bef1d9bf SHA-256: 9f7da4dbc2ce36c32f872ebc81c5bc879e7980e700d5d69a8a99625e388ecb72
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF file exhibits a 'PDF_SEO_LINK_FARM' heuristic, indicating a large number of embedded external links. The document body contains numerous URLs pointing to PDF files hosted on 'gorillawalker.com'. This suggests the primary purpose is to distribute or link to a large volume of content, potentially for SEO manipulation or to serve as a lure for malicious downloads.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.gorillawalker.com/souled-american-how-black-music-transformed-white-culture.pdf
    • http://www.gorillawalker.com/the-further-adventures-of-batman-14-all-new-adventures-of.pdf
    • http://www.gorillawalker.com/the-digital-eye-photographic-art-in-the-electronic-age.pdf
    • http://www.gorillawalker.com/fuhrer.pdf
    • http://www.gorillawalker.com/handbook-of-cognitive-task-design-human-factors-and-ergonomics.pdf
    • http://www.gorillawalker.com/the-alpha-last-will-and-testament-kit-special-book-edition.pdf
    • http://www.gorillawalker.com/les-collines-aux-mille-grottes-le-cycle-de-merlin-2.pdf
    • http://www.gorillawalker.com/l-a-justice.pdf
    • http://www.gorillawalker.com/basic-microwaving.pdf
    • http://www.gorillawalker.com/shamanic-meditations-guided-journeys-for-insight-vision-and-healing.pdf
    • http://www.gorillawalker.com/stock-car-racing-chronicle-the-1990s.pdf
    • http://www.gorillawalker.com/brief-making-and-the-use-of-law-books-classic-reprint.pdf
    • http://www.gorillawalker.com/atlas-de-les-illes-balears-geografic-economic-historic-catalan-edition.pdf
    • http://www.gorillawalker.com/vertigo-visions-artwork-from-the-cutting-edge-of-comics.pdf
    • http://www.gorillawalker.com/beginning-intermediate-algebra-second-edition-student-solutions-manual.pdf
    • http://www.gorillawalker.com/developing-mathematical-reasoning-in-grades-k-12-yearbook-national-council.pdf
    • http://www.gorillawalker.com/credit-repair-guide-repair-negative-credit-yourself-answers-to-what.pdf
    • http://www.gorillawalker.com/dragon-ball-n-13.pdf
    • http://www.gorillawalker.com/book-of-misers-al-bukhala-great-books-of-islamic-civilization.pdf
    • http://www.gorillawalker.com/how-to-teach-your-baby-to-swim.pdf
    • http://www.gorillawalker.com/history-of-the-covenanters-in-scotland-vol-i.pdf
    • http://www.gorillawalker.com/active-and-passive-analog-filter-design-an-introduction-mcgraw-hill.pdf
    • http://www.gorillawalker.com/drama-city-3-revenge-kindle-edition.pdf
    • http://www.gorillawalker.com/the-great-space-scrapyard-ship-book-6-kindle-edition.pdf
    • http://www.gorillawalker.com/more-secrets-of-consulting-the-consultant-s-tool-kit.pdf
    • http://www.gorillawalker.com/secrets-in-the-stones-dr-thomas-silkstone-mystery.pdf
    • http://www.gorillawalker.com/the-true-nature-of-energy-transforming-anxiety-into-tranquility-modern.pdf
    • http://www.gorillawalker.com/till-death-do-us-part-unless-i-kill-you-first.pdf
    • http://www.gorillawalker.com/mimo-signals-and-systems-information-technology-transmission-processing-and-storage.pdf
    • http://www.gorillawalker.com/by-andres-j-pumariega-the-handbook-of-child-and-adolescent.pdf
    • http://www.gorillawalker.com/cutting-edge-1-the-open-sicilian-1-the-cutting-edge.pdf
    • http://www.gorillawalker.com/unstuck-in-time-a-journey-through-kurt-vonnegut-s-life.pdf
    • http://www.gorillawalker.com/operations-research-principles-and-applications-print-replica-kindle-edition.pdf
    • http://www.gorillawalker.com/growing-native-hawaiian-plants-kindle-edition.pdf
    • http://www.gorillawalker.com/metaphysics-medicine-restoring-freedom-of-thought-to-the-art-and.pdf
    • http://www.gorillawalker.com/hungarian-dance-no-5-in-f-sharp-minor-by-johannes.pdf
    • http://www.gorillawalker.com/additive-subgroups-of-topological-vector-spaces-lecture-notes-in-mathematics.pdf
    • http://www.gorillawalker.com/bear-witness-pearson-security-1-a-bear-shifter-paranormal-romance.pdf
    • http://www.gorillawalker.com/madame-wong-s-long-life-chinese-cookbook.pdf
    • http://www.gorillawalker.com/what-is-m-e-a-guide-for-children-explaining-the.pdf
    • http://www.gorillawalker.com/s
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#
    • http://purl.org/dc/elements/1.1/
    • http://ns.adobe.com/xap/1.0/
    • http://ns.adobe.com/pdf/1.3/
    • http://ns.adobe.com/xap/1.0/mm/
    • http://www.aiim.org/pdfa/ns/extension/
    • http://www.aiim.org/pdfa/ns/schema#
    • http://www.aiim.org/pdfa/ns/property#
    • http://www.aiim.org/pdfa/ns/id/

Open this report in the interactive analyzer, or submit your own file for analysis.