Malicious PDF — malware analysis report

Heuristics 4

• Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
  Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
• Cracked-software lure uses shortlink/download gateway critical PDF_CRACKED_SOFTWARE_SHORTLINK_LURE
  PDF visible text advertises a crack, serial number, archive, or pirated-software download and pairs it with a shortlink or encoded download gateway. This is a high-confidence social-engineering carrier for unwanted software or droppers; the PDF itself is not a parser exploit.
• External URI info PDF_URI
  PDF contains an external URL action
• Embedded URL info EMBEDDED_URL
  One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
  URL http://bestsmartfind.com/ZG93bmxvYWQgY2hpY2tlbiBpbnZhZGVycyA1IGZ1bGwgdmVyc2lvbiA0NwZG9/.cinderblocks/ZG93bmxvYWR8ZDJxZDNsMFpueDhNVFkyTlRjek16ZzBNWHg4TWpVNU1IeDhLRTBwSUZkdmNtUndjbVZ6Y3lCYldFMU1VbEJESUZZeUlGQkVSbDA/drummoyne/llanberis.hots PDF link annotation

  • https://sandylaneestatebeachclub.com/wp-content/uploads/2022/10/ranneld.pdfIn PDF document text
  • https://www.riobrasilword.com/2022/10/16/izotope-ozone-5-fixed-crack-rar-file/In PDF document text
  • https://subsidiosdelgobierno.site/ail-sample-channel-levels8-top-download/In PDF document text
  • https://thenetworkcircle.com/wp-content/uploads/2022/10/Ingenieria_De_Transito_Y_Carreteras_Nicholas_Garber_Descargar_Gratisl.pdfIn PDF document text
  • http://saddlebrand.com/?p=129029In PDF document text
  • https://win-win-plan.com/wp-content/uploads/2022/10/wiltere.pdfIn PDF document text
  • https://bloomhomeeg.com/wp-content/uploads/2022/10/Passmark_Keyboard_Test_V3_Serial_Number_WORK.pdfIn PDF document text
  • https://italytourexperience.com/wp-content/uploads/2022/10/HD_Online_Player_video_copilot_optical_flares_for_nuk.pdfIn PDF document text
  • https://seektotravel.com/wp-content/uploads/2022/10/jetli_fearless_dual_audio_eng_hindi.pdfIn PDF document text
  • http://www.distributorbangunan.com/?p=93727In PDF document text
  • http://bestsmartfind.com/zg93bmxvywqgy2hpy2tlbibpbnzhzgvycya1igz1bgwgdmvyc2lvbia0nwzg9/.cinderblocks/zg93bmxvywr8zdjxzdnsmfpuedhnvfkytlrjek16zzbnwhg4twpvnu1iedhlrtbwsuzkdmntundjbvz6y3lcyldfmu1vbejesuzzeulgqkvsbda/drummoyne/llanberis.hotsIn PDF document text
  • http://www.tcpdf.orgIn PDF document text
  • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
  • http://purl.org/dc/elements/1.1/In PDF document text
  • http://ns.adobe.com/xap/1.0/In PDF document text
  • http://ns.adobe.com/pdf/1.3/In PDF document text
  • http://ns.adobe.com/xap/1.0/mm/In PDF document text
  • http://www.aiim.org/pdfa/ns/extension/In PDF document text
  • http://www.aiim.org/pdfa/ns/schema#In PDF document text
  • http://www.aiim.org/pdfa/ns/property#In PDF document text
  • http://www.aiim.org/pdfa/ns/id/In PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.