Malicious PDF — malware analysis report

Static analysis result for SHA-256 f0d759db30f9e6da…

MALICIOUS

PDF

43.8 KB Created: 2018-11-23 08:00:36 +03:00 Authoring application: PFU ScanSnap Manager 4.2.14 (via Adobe PDF Scan Library 2.3)
MD5: 051185c60bc9f7f6330e3c0144d42ad2 SHA-1: e1761f525d7fba7d0245f4d729775a2d635d0fe0 SHA-256: f0d759db30f9e6da12b44e460c23302f03937bd69472013d3b3008b3460707e1
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF contains a large number of embedded external links, as indicated by the 'PDF_SEO_LINK_FARM' heuristic. The ML classifier also flagged the document as malicious. The primary purpose appears to be to host a link farm, likely for SEO manipulation or to redirect users to potentially harmful content hosted on the 'gorillawalker.com' domain.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9016

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.gorillawalker.com/greenland-the-adjacent-seas-and-the-north-west-passage-to.pdf
    • http://www.gorillawalker.com/frugal-ways-the-art-of-having-more-doing-less.pdf
    • http://www.gorillawalker.com/the-rooms-are-filled-a-novel.pdf
    • http://www.gorillawalker.com/alternative-dispute-resolution-hornbook-series-and-other-textbooks.pdf
    • http://www.gorillawalker.com/exploring-writing-paragraphs-and-essays-w-connect-writing-2-0.pdf
    • http://www.gorillawalker.com/pathfinder-pawns-wrath-of-the-righteous-adventure-path-pawn-collection.pdf
    • http://www.gorillawalker.com/100-most-beautiful-songs-ever-for-fingerpicking-guitar.pdf
    • http://www.gorillawalker.com/the-elements-of-you-comfort-image-and-thirst-volume-1.pdf
    • http://www.gorillawalker.com/the-methodist-worship-book-bilingual-welsh-english-standard-edition-llyfr.pdf
    • http://www.gorillawalker.com/accessory-liability-hart-studies-in-private-law.pdf
    • http://www.gorillawalker.com/punishing-the-teacher-1-failing-grade.pdf
    • http://www.gorillawalker.com/carlton-fredericks-guide-to-women-s-nutrition.pdf
    • http://www.gorillawalker.com/speed-trap-inside-the-biggest-scandal-in-olympic-history.pdf
    • http://www.gorillawalker.com/key-party-mmff-swinging-wife-swap-erotica.pdf
    • http://www.gorillawalker.com/digital-art-masters-volume-8.pdf
    • http://www.gorillawalker.com/maynard-kindle-edition.pdf
    • http://www.gorillawalker.com/die-leerstasie-gr-7-leerdersboek-mens-en-sosiale-wetenskappe-afrikaans.pdf
    • http://www.gorillawalker.com/21st-century-clues-essays-in-ethics-ontology-and-time-travel.pdf
    • http://www.gorillawalker.com/laughing-all-the-way.pdf
    • http://www.gorillawalker.com/oil-lamps-ii-glass-kerosene-lamps.pdf
    • http://www.gorillawalker.com/gospel-hymns-with-a-velvet-touch-10-elegant-settings-of.pdf
    • http://www.gorillawalker.com/a-paddler-s-guide-to-algonquin-park-by-kevin-callan.pdf
    • http://www.gorillawalker.com/matrix-computations-2e-e-bk.pdf
    • http://www.gorillawalker.com/introducci-n-a-javascript-c-mo-hacer-programas-sencillos-con.pdf
    • http://www.gorillawalker.com/dc-ac-fundamentals-a-systems-approach.pdf
    • http://www.gorillawalker.com/the-concise-book-of-muscles.pdf
    • http://www.gorillawalker.com/survey-of-india-route-map-for-the-western-himalayas-kashmir.pdf
    • http://www.gorillawalker.com/wholeness-in-hope-care-on-nurtering-the-beauty-of-the.pdf
    • http://www.gorillawalker.com/contact-lens-practice.pdf
    • http://www.gorillawalker.com/how-i-cured-myself-of-autism.pdf
    • http://www.gorillawalker.com/teff-the-ultimate-recipe-guide-over-30-gluten-free-recipes.pdf
    • http://www.gorillawalker.com/stone-animals-electric-literature-s-recommended-reading-kindle-edition.pdf
    • http://www.gorillawalker.com/confessions-homoerotic-short-stories.pdf
    • http://www.gorillawalker.com/adelaide-op-46-arrangement-for-voice-and-orchestra-full-score.pdf
    • http://www.gorillawalker.com/oxford-collocations-dictionary-for-students-of-english.pdf
    • http://www.gorillawalker.com/jubilate-deo-choral-octavo-faber-edition.pdf
    • http://www.gorillawalker.com/charter-schools-and-accountability-in-public-education.pdf
    • http://www.gorillawalker.com/getting-started-discover-your-inner-artist-as-you-explore-the.pdf
    • http://www.gorillawalker.com/guatemala-an-entry-from-uxl-s-junior-worldmark-encyclopedia-of.pdf
    • http://www.gorillawalker.com/beirut-our-memory-guided-tour-illustrated-with-picture-postcards-folios.pdf
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#
    • http://purl.org/dc/elements/1.1/
    • http://ns.adobe.com/xap/1.0/
    • http://ns.adobe.com/pdf/1.3/
    • http://ns.adobe.com/xap/1.0/mm/
    • http://www.aiim.org/pdfa/ns/extension/
    • http://www.aiim.org/pdfa/ns/schema#
    • http://www.aiim.org/pdfa/ns/property#
    • http://www.aiim.org/pdfa/ns/id/

Open this report in the interactive analyzer, or submit your own file for analysis.