Malicious PDF — malware analysis report

Static analysis result for SHA-256 ad7e037cf8320694…

MALICIOUS

PDF

48.2 KB Created: 2019-03-17 12:30:39 +03:00 Authoring application: - (via iText 2.1.7 by 1T3XT) First seen: 2021-06-28
MD5: d16483e9177f7a5c88139b81f78b9d1d SHA-1: 66827735f64897c8525cf7b85a4c1113753ab024 SHA-256: ad7e037cf8320694c2a2015410b080f8907466ddd8f5d5c21c3da8a50cc39d4d
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded external links, identified by the PDF_SEO_LINK_FARM heuristic. The ML classifier also flagged the document as malicious. The primary purpose appears to be directing users to a link farm, likely for SEO manipulation or to host malicious content on the linked sites.

Machine Learning

  • Nyx PDF Classifier malicious score 0.8013

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.gorillawalker.com/bees-hives-honey-beekeeping-for-children.pdf In PDF document text
    • http://www.gorillawalker.com/cytochrome-p450-function-and-pharmacological-roles-in-inflammation-and-cancer.pdfIn PDF document text
    • http://www.gorillawalker.com/electricity-for-the-future-electrified-gareth-stevens.pdfIn PDF document text
    • http://www.gorillawalker.com/se-descifra-el-codigo-judio-12-secretos-que-transformaran-su.pdfIn PDF document text
    • http://www.gorillawalker.com/and-justice-for-some-an-expose-of-the-lawyers-and.pdfIn PDF document text
    • http://www.gorillawalker.com/del-campaign-funding-scrutinized-contributions-to-delaware-insurance-commissioner-donna.pdfIn PDF document text
    • http://www.gorillawalker.com/the-longest-way-home-one-man-s-quest-for-the.pdfIn PDF document text
    • http://www.gorillawalker.com/limit-analysis-in-soil-mechanics-developments-in-geotechnical-engineering.pdfIn PDF document text
    • http://www.gorillawalker.com/odessa-a-guide.pdfIn PDF document text
    • http://www.gorillawalker.com/jim-thome-lefty-launcher-baseball-superstar.pdfIn PDF document text
    • http://www.gorillawalker.com/concise-dental-anatomy-and-morphology-4th-fourth-edition-by-fuller.pdfIn PDF document text
    • http://www.gorillawalker.com/prakriti-your-ayurvedic-constitution-your-ayurvedic-constitution-revised-enlarged-second.pdfIn PDF document text
    • http://www.gorillawalker.com/beckett-autographs-price-guide.pdfIn PDF document text
    • http://www.gorillawalker.com/marketing-green-buildings-guide-for-engineering-construction-and-architecture.pdfIn PDF document text
    • http://www.gorillawalker.com/richard-iii-arkangel-complete-shakespeare.pdfIn PDF document text
    • http://www.gorillawalker.com/baby-boomers-making-use-of-health-care-services-upfront-an.pdfIn PDF document text
    • http://www.gorillawalker.com/keating-on-construction-contracts-mainwork-supplement.pdfIn PDF document text
    • http://www.gorillawalker.com/how-to-solve-divorce-problems-in-california-in-2010-managing.pdfIn PDF document text
    • http://www.gorillawalker.com/truth-and-nothing-but-the-sharp-sisters.pdfIn PDF document text
    • http://www.gorillawalker.com/mackey-s-revised-encyclopedia-of-freemasonry-3-volumes.pdfIn PDF document text
    • http://www.gorillawalker.com/marty-mcguire-has-too-many-pets.pdfIn PDF document text
    • http://www.gorillawalker.com/ayurveda-and-panchakarma-the-science-of-healing-and-rejuvenation.pdfIn PDF document text
    • http://www.gorillawalker.com/hospital-ships-and-troop-transport-of-the-first-world-war.pdfIn PDF document text
    • http://www.gorillawalker.com/bridge-of-the-gods-mountains-of-fire-a-return-of.pdfIn PDF document text
    • http://www.gorillawalker.com/the-valour-of-faith-the-gospel-in-the-life-of.pdfIn PDF document text
    • http://www.gorillawalker.com/two-leggings-the-making-of-a-crow-warrior-based-on.pdfIn PDF document text
    • http://www.gorillawalker.com/fundamentals-of-building-energy-dynamics-solar-heat-technologies.pdfIn PDF document text
    • http://www.gorillawalker.com/root-causes-of-sudan-s-civil-wars-african-issues.pdfIn PDF document text
    • http://www.gorillawalker.com/the-structures-and-movement-of-breathing-a-primer-for-choirs.pdfIn PDF document text
    • http://www.gorillawalker.com/the-pathology-of-man-a-study-of-human-evil.pdfIn PDF document text
    • http://www.gorillawalker.com/black-youth-rising-activism-and-radical-healing-in-urban-america.pdfIn PDF document text
    • http://www.gorillawalker.com/haarlem-netherlands-conurbation-1-10-400-street-map-cito.pdfIn PDF document text
    • http://www.gorillawalker.com/microsoft-powerpoint-2010-advanced-quick-reference-guide-cheat-sheet-of.pdfIn PDF document text
    • http://www.gorillawalker.com/animal-rights-distinguishing-between-fact-and-opinion-teachers-guide.pdfIn PDF document text
    • http://www.gorillawalker.com/grue-the-new-riddle-of-induction.pdfIn PDF document text
    • http://www.gorillawalker.com/hydrate-engineering-henry-l-doherty-series.pdfIn PDF document text
    • http://www.gorillawalker.com/take-me-there.pdfIn PDF document text
    • http://www.gorillawalker.com/five-7-shojo-manga-spanish-edition.pdfIn PDF document text
    • http://www.gorillawalker.com/the-brazilian-road-movie-journeys-of-self-discovery-university-of.pdfIn PDF document text
    • http://www.gorillawalker.com/construction-of-structural-steel-building-frames.pdfIn PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text
    • http://www.aiim.org/pdfa/ns/extension/In PDF document text
    • http://www.aiim.org/pdfa/ns/schema#In PDF document text
    • http://www.aiim.org/pdfa/ns/property#In PDF document text
    • http://www.aiim.org/pdfa/ns/id/In PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.