Malicious PDF — malware analysis report

Static analysis result for SHA-256 b0550a783fccf7c9…

MALICIOUS

PDF

45.5 KB Created: 2019-03-17 01:54:29 +03:00 Authoring application: - (via Acrobat Distiller 5.0 (Windows))
MD5: 0c32da8faf08755c3563db2a296db1ba SHA-1: 518ea554f035b2bd81743fc4fd6480526d1ff84f SHA-256: b0550a783fccf7c966c9e5dd2fb80f7fda7910c05cec4dc7808b98e31b6c909c
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF file was flagged by a machine learning classifier as malicious. Static analysis revealed a significant number of embedded URLs, forming a link farm hosted on www.gorillawalker.com. This suggests the document's primary purpose is to lure users to external sites, likely for phishing or malware distribution.

Machine Learning

  • Nyx PDF Classifier malicious score 0.8974

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.gorillawalker.com/the-howard-shore-collection-piano-solo-piano-vocal-chords.pdf
    • http://www.gorillawalker.com/the-art-of-teaching-art-a-guide-for-teaching-and.pdf
    • http://www.gorillawalker.com/goodbye-my-baby.pdf
    • http://www.gorillawalker.com/rocky-top-tbb.pdf
    • http://www.gorillawalker.com/do-it-yourself-advertising-direct-mail-and-publicity-ready-to.pdf
    • http://www.gorillawalker.com/giving-the-billionaire-an-heir-part-5.pdf
    • http://www.gorillawalker.com/acrylic-still-lifes-ht287-how-to-draw-paint-art-instruction.pdf
    • http://www.gorillawalker.com/just-not-mine-escape-to-new-zealand-volume-6.pdf
    • http://www.gorillawalker.com/early-elementary-activities-151-spring-2015-heartshaper-children-146-s.pdf
    • http://www.gorillawalker.com/tellers-tales-and-translation-in-chaucer-s-canterbury-tales.pdf
    • http://www.gorillawalker.com/eisenhower-and-the-cold-war-economy.pdf
    • http://www.gorillawalker.com/earth-ponds-sourcebook-the-pond-owner-s-manual-and-resource.pdf
    • http://www.gorillawalker.com/chew-secret-agent-poyo-1.pdf
    • http://www.gorillawalker.com/how-to-learn-and-memorize-english-grammar-rules-using-a.pdf
    • http://www.gorillawalker.com/la-corza-blanca-leer-en-espanol-level-2.pdf
    • http://www.gorillawalker.com/gordo-the-gringo-a-tale-of-mexico-the-gordo-series.pdf
    • http://www.gorillawalker.com/surgical-treatment-of-hilar-and-intrahepatic-cholangiocarcinoma-updates-in-surgery.pdf
    • http://www.gorillawalker.com/control-of-asthma-hinges-on-parental-understanding-brief-article-an.pdf
    • http://www.gorillawalker.com/mongolia-in-the-twentieth-century.pdf
    • http://www.gorillawalker.com/prairie-justice-a-history-of-illinois-courts-under-french-english.pdf
    • http://www.gorillawalker.com/the-second-leonaur-book-of-great-ghost-and-horror-stories.pdf
    • http://www.gorillawalker.com/foreign-policy-no-112-fall-1998-outsourcing-war.pdf
    • http://www.gorillawalker.com/cheraw-district-south-carolina-court-of-equity-volume-2-minutes.pdf
    • http://www.gorillawalker.com/video-recordings-act-1993-elizabeth-ii-chapter-24.pdf
    • http://www.gorillawalker.com/dessert-designer-creations-you-can-make-and-eat-craft-it.pdf
    • http://www.gorillawalker.com/writing-and-illustrating-children-s-books-for-publication-writing-illustrating.pdf
    • http://www.gorillawalker.com/the-intelligent-gardener-growing-nutrient-dense-food.pdf
    • http://www.gorillawalker.com/berlitz-learning-system-spanish-user-manual-plus-4-cds.pdf
    • http://www.gorillawalker.com/negril-beach-vacations-a-comprehensive-guide-for-travlers-to-seven.pdf
    • http://www.gorillawalker.com/murray-s-handbook-for-egypt-and-the-sudan-eleventh-edition.pdf
    • http://www.gorillawalker.com/carolina-wine-country-cooking.pdf
    • http://www.gorillawalker.com/geldmaschine-digitalkamera-german-edition-kindle-edition.pdf
    • http://www.gorillawalker.com/uprising-a-novel.pdf
    • http://www.gorillawalker.com/nurseries-a-design-guide.pdf
    • http://www.gorillawalker.com/your-miraculous-back-a-step-by-step-guide-to-relieving.pdf
    • http://www.gorillawalker.com/the-law-relating-to-breach-of-promise-of-marriage-working.pdf
    • http://www.gorillawalker.com/la-biblia-de-smoothies-verdes-39-de-las-mejores-recetas.pdf
    • http://www.gorillawalker.com/studio-companion-series-3d-design-basics.pdf
    • http://www.gorillawalker.com/power-of-persuasion-essays-by-a-very-public-lawyer.pdf
    • http://www.gorillawalker.com/fulfilling-social-and-economic-rights.pdf
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#
    • http://purl.org/dc/elements/1.1/
    • http://ns.adobe.com/xap/1.0/
    • http://ns.adobe.com/pdf/1.3/
    • http://ns.adobe.com/xap/1.0/mm/
    • http://www.aiim.org/pdfa/ns/extension/
    • http://www.aiim.org/pdfa/ns/schema#
    • http://www.aiim.org/pdfa/ns/property#
    • http://www.aiim.org/pdfa/ns/id/

Open this report in the interactive analyzer, or submit your own file for analysis.