Malicious PDF — malware analysis report

Static analysis result for SHA-256 03e83a5b64f86167…

MALICIOUS

PDF

28.9 KB Created: 2021-06-01 15:58:55 UTC Authoring application: Softplicity First seen: 2026-05-10
MD5: ea6e589372be25196360b32e947a0cbb SHA-1: 01947f8a6b617ad2cf2dd24d8931e8bb1092b5fb SHA-256: 03e83a5b64f8616783ea522f29dcef76a3fd2041fdc3c54b352518711e9cd0d2
94 Risk Score

Machine Learning

  • Nyx PDF Classifier suspicious score 0.3216

Heuristics 4

  • Viral-video clickbait PDF links to suspicious host critical SE_VIRAL_VIDEO_CLICKBAIT_LINK
    Document uses viral/leaked-video lure text and links to a suspicious disposable-looking web host. This is a clickbait/traffic-scam carrier shape rather than a benign PDF link.
  • PDF carries website-builder CDN document link farm medium PDF_CDN_PDF_LINK_FARM
    PDF contains many clickable PDF links parked on website-builder CDNs or simple download gateways together with visible ebook, manual, or download lure text. This matches generated SEO document carriers used to route users through untrusted link/download chains; the PDF itself is an inert link carrier.
  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL https://cdn-cms.f-static.net/uploads/5261512/normal_60b55b784f691.pdf PDF link annotation
    • https://cdn-cms.f-static.net/uploads/5261390/normal_60b5595f5f3f3.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5263412/normal_60b6385e2b8f1.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5261405/normal_60b55120da685.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5261386/normal_60b551377ed7c.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5261386/normal_60b559c7ec714.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5261450/normal_60b554e1066ec.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5261377/normal_60b54f3481b53.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5263412/normal_60b63ba45ed10.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5263412/normal_60b63cbca2d33.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5263412/normal_60b63ce0b82ee.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5263412/normal_60b63ccf35592.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5263412/normal_60b63d02be67b.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5263412/normal_60b63bb5a9a12.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5263412/normal_60b63c8ade688.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5263412/normal_60b63cf1e9ded.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5263412/normal_60b63d13e93a4.pdfIn PDF document text
    • https://cdn-cms.f-static.net/uploads/5261405/normal_60b55471b4bd6.pdfIn PDF document text
    • http://def.lods.icu/dls.php?q=Ford+Mondeo+Service+And+Repair+Manual+1993+1996+Haynes+Service+And+Repair+Manual+By+Churchill+Jeremy+Legg+A+K+1996+HardcoverIn PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text

Related samples 5

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Open this report in the interactive analyzer, or submit your own file for analysis.