MALICIOUS
124
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
This PDF file was detected as malicious by ML classifiers and ClamAV, indicating a phishing or trojan threat. It contains an embedded URI pointing to 'zajinet.ru', which is likely part of a phishing campaign. The document body, though heavily obfuscated, appears to be a lure related to academic notes, attempting to trick users into clicking the malicious link.
Machine Learning
- Nyx PDF Classifier malicious score 0.6979
Heuristics 4
-
ClamAV: Pdf.Phishing.Trojan-d2528dad23a95d95-d2528dad23a95d95-10044376-0 critical CLAMAV_DETECTIONClamAV detected this file as malware: Pdf.Phishing.Trojan-d2528dad23a95d95-d2528dad23a95d95-10044376-0
-
Small PDF is a non-clustered link farm on disposable hosting medium PDF_SEO_DISPOSABLE_LINK_FARMSmall PDF contains many clickable external PDF links spread thin across many distinct hosts (no single dominant host), corroborated by a utm_term SEO-redirector link and/or links parked on free/disposable content hosts. This is the 'free document/template' SEO phishing PDF family, which ranks for search queries and routes users into payload/redirect chains, rather than a normal document citation pattern. The PDF itself carries no exploit — the risk is the linked destinations.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL https://zajinet.ru/strik?utm_term=spivak+calculus+on+manifolds+notes PDF link annotation
- https://cdn-cms.f-static.net/uploads/4445754/normal_5fd95ea4c965c.pdfIn PDF document text
- https://cdn-cms.f-static.net/uploads/4428335/normal_5fd7fae743fdb.pdfIn PDF document text
- https://cdn-cms.f-static.net/uploads/4454280/normal_5fd23a3424d3f.pdfIn PDF document text
- http://mufobej.iblogger.org/94761286817.pdfIn PDF document text
- http://mipamuwupo.22web.org/demuluvogizevajug.pdfIn PDF document text
- http://ylyn.ru/stoner_invisible_glass_sds_sheetst4fk.pdfIn PDF document text
- https://cdn.sqhk.co/mivuxakadu/JgcRgdh/kuzitibepog.pdfIn PDF document text
- http://paypallsecurity.com/35712030065ua4y2.pdfIn PDF document text
- http://exampl1214.com/nuxaxawosipvwq7.pdfIn PDF document text
- https://cdn.sqhk.co/nuroteditu/ghhjvjj/bowuganujekopimolonirasun.pdfIn PDF document text
- https://cdn.sqhk.co/zixemoliz/gekjiyk/cheap_street_basketball_hoops_for_sale.pdfIn PDF document text
- http://reestr.site/does_moto_g4_support_4g2x2fi.pdfIn PDF document text
- https://static.s123-cdn-static.com/uploads/4410722/normal_5fe356e716df3.pdfIn PDF document text
- https://abee6ad4-cf47-459a-954e-22b9b9bb30ad.filesusr.com/ugd/4bdc6d_ee377785d6d247048b17f0de5a770f68.pdf?index=trueIn PDF document text
- https://s3.amazonaws.com/gurafoga/2790954885.pdfIn PDF document text
- https://9462281c-6212-45c1-8f90-c4e3c363a226.filesusr.com/ugd/007d40_62ff2039dc064db7a6efc51e075e03ff.pdf?index=trueIn PDF document text
- https://s3.amazonaws.com/tixedujegibex/rajuvaximepibatovirojata.pdfIn PDF document text
- https://4a0f17ac-6ce6-4c05-9546-25c48d39d9f7.filesusr.com/ugd/cd79e3_db0792d9e2434fab9572a01769da7152.pdf?index=trueIn PDF document text
- https://0aed7b51-d02b-4864-a6bb-b478bb809667.filesusr.com/ugd/fbdaab_f9d1cbed3f354f1b9c53e1b4b0276d7b.pdf?index=trueIn PDF document text
- https://83f018a0-8e49-44f0-b57e-805e464a5f06.filesusr.com/ugd/10a4aa_272f909e1eb64c65ade1b055240639f3.pdf?index=trueIn PDF document text
- http://wevikokuzufos.epizy.com/break_even_formula.pdfIn PDF document text
Open this report in the interactive analyzer, or submit your own file for analysis.