Malicious PDF — malware analysis report

Heuristics 3

• Cracked-software lure uses shortlink/download gateway critical PDF_CRACKED_SOFTWARE_SHORTLINK_LURE
  PDF visible text advertises a crack, serial number, archive, or pirated-software download and pairs it with a shortlink or encoded download gateway. This is a high-confidence social-engineering carrier for unwanted software or droppers; the PDF itself is not a parser exploit.
• External URI info PDF_URI
  PDF contains an external URL action
• Embedded URL info EMBEDDED_URL
  One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
  URL http://mydrugdir.com/coaches/debiting/hooray.janaury.bmpr/panela/YWRvYmUgcGhvdG9zaG9wIGZyZWUgZG93bmxvYWQgaW4gYW5kcm9pZAYWR/ZG93bmxvYWR8VVA0TldkMGVueDhNVFkxTmpZME1EZ3hOM3g4TWpVNU1IeDhLRTBwSUZkdmNtUndjbVZ6Y3lCYldFMU1VbEJESUZZeUlGQkVSbDA PDF link annotation

  • https://oag.uz/great-photo-manipulation-tutorials/In PDF document text
  • https://www.clbs.co.th/system/files/webform/odeazen466.pdfIn PDF document text
  • https://www.inqaahe.org/sites/default/files/webform/hillant75.pdfIn PDF document text
  • https://ig-link.com/adobe-photoshop-for-ipad-iphone/In PDF document text
  • https://missionmieuxetre.com/2022/07/01/download-photoshop-7-free-for-windows-7/In PDF document text
  • https://7sixshop.com/2022/07/download-adobe-photoshop-for-windows-7/In PDF document text
  • https://vipfitnessproducts.com/free-cinematic-custom-luts/In PDF document text
  • https://ufostorekh.com/wp-content/uploads/2022/07/beynwens.pdfIn PDF document text
  • https://www.berlincompanions.com/jpg-tool-plugin-jpg-cleanup-jpg-cleanup-2020-free-jpeg-cleanup/?p=14136In PDF document text
  • https://ubiz.chat/upload/files/2022/07/OHkrYQYS8Xh99hhrjhak_01_f0ccd96755c0afe62818d348bd8e4a6b_file.pdfIn PDF document text
  • https://dogrywka.pl/wp-content/uploads/2022/07/download_old_versions_of_adobe_photoshop_elements.pdfIn PDF document text
  • https://likesmeet.com/upload/files/2022/07/wdVJKiMxOWx4oS5slYZC_01_f0ccd96755c0afe62818d348bd8e4a6b_file.pdfIn PDF document text
  • https://www.coinscustom.com.au/sites/www.coinscustom.com.au/files/webform/arcala407.pdfIn PDF document text
  • http://bellarefood.com/wp-content/uploads/2022/07/Free_Pro_Brushes_Including_Regular_Gradient__Texture_Brushes.pdfIn PDF document text
  • https://mycoopmed.net/wp-content/uploads/2022/07/padsout.pdfIn PDF document text
  • https://boiling-gorge-28930.herokuapp.com/photoshop_old_version_download_for_windows_10.pdfIn PDF document text
  • https://serkit.ru/wp-content/uploads/2022/07/zelmarl.pdfIn PDF document text
  • https://morning-shelf-82651.herokuapp.com/tamitad.pdfIn PDF document text
  • http://www.camptalk.org/photoshop-how-to-use-the-magic-wand-tool/In PDF document text
  • http://mydrugdir.com/coaches/debiting/hooray.janaury.bmpr/panela/ywrvymugcghvdg9zag9wigzyzwugzg93bmxvywqgaw4gyw5kcm9pzaywr/zg93bmxvywr8vva0tldkmgvuedhnvfkxtmpzme1ez3hom3g4twpvnu1iedhlrtbwsuzkdmntundjbvz6y3lcyldfmu1vbejesuzzeulgqkvsbdaIn PDF document text
  • https://www.lakeheadu.ca/system/files/webform/employment_opportunities/free-download-photoshop-brushes-design.pdfIn PDF document text
  • http://www.tcpdf.orgIn PDF document text
  • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
  • http://purl.org/dc/elements/1.1/In PDF document text
  • http://ns.adobe.com/xap/1.0/In PDF document text
  • http://ns.adobe.com/pdf/1.3/In PDF document text
  • http://ns.adobe.com/xap/1.0/mm/In PDF document text
  • http://www.aiim.org/pdfa/ns/extension/In PDF document text
  • http://www.aiim.org/pdfa/ns/schema#In PDF document text
  • http://www.aiim.org/pdfa/ns/property#In PDF document text
  • http://www.aiim.org/pdfa/ns/id/In PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.