Malicious PDF — malware analysis report

Heuristics 6

• Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
  Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
• Cracked-software lure uses shortlink/download gateway critical PDF_CRACKED_SOFTWARE_SHORTLINK_LURE
  PDF visible text advertises a crack, serial number, archive, or pirated-software download and pairs it with a shortlink or encoded download gateway. This is a high-confidence social-engineering carrier for unwanted software or droppers; the PDF itself is not a parser exploit.
• Cracked-software lure uses download-gateway redirectors high PDF_CRACKED_SOFTWARE_REDIRECTOR_LINK_FARM
  PDF contains multiple cracked-software/keygen/serial-key lure links together with long encoded download-gateway URLs or known crack-download redirector hosts. This is stronger than generic piracy vocabulary: the document is an SEO lure that funnels users through redirect/download infrastructure commonly used for adware, unwanted software, or droppers.
• PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LURE
  PDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
• External URI info PDF_URI
  PDF contains an external URL action
• Embedded URL info EMBEDDED_URL
  One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
  URL http://awarefinance.com/ZG93bmxvYWR8d3Q2WVRWbmNueDhNVFkxTmpZd05ESTNOSHg4TWpVM05IeDhLRTBwSUhKbFlXUXRZbXh2WnlCYlJtRnpkQ0JIUlU1ZA/dennise.QWRvYmUgUGhvdG9zaG9wIDIwMjEgKFZlcnNpb24gMjIuNSkQWR.arithmetical/cluster.occasions/fallas.grassfire.hypertension PDF link annotation

  • http://findmallorca.com/adobe-photoshop-cc-2015-version-18-activation-for-windows/In PDF document text
  • https://nisharma.com/photoshop-crack-with-serial-number-activation-code-2022/In PDF document text
  • https://hookercafe.com/wp-content/uploads/2022/07/Photoshop_2021_Version_224.pdfIn PDF document text
  • https://ppetn.com/wp-content/uploads/2022/06/Adobe_Photoshop_CC_2015_version_18.pdfIn PDF document text
  • https://vintriplabs.com/photoshop-2021-version-22-5-1-download/In PDF document text
  • http://dottoriitaliani.it/ultime-notizie/salute/adobe-photoshop-2022-version-23-0-2-with-license-key-license-code-keygen-macwin/In PDF document text
  • https://viajacomolocal.com/wp-content/uploads/2022/06/Photoshop_2022_version_23.pdfIn PDF document text
  • https://stinger-live.s3.amazonaws.com/upload/files/2022/07/tcBDACo9NqUYP9KWMJ9T_01_c540925ab3ddc075532bac20316918fd_file.pdfIn PDF document text
  • https://fumostoppista.com/adobe-photoshop-2021-version-22-1-0-product-key-and-xforce-keygen/In PDF document text
  • https://bodhibliss.org/adobe-photoshop-2021-version-22-4-2-with-license-key-for-pc-april-2022/In PDF document text
  • http://www.rutaecologica.com/wp-content/uploads/2022/07/finnurya.pdfIn PDF document text
  • https://alquilerdedepartamentoslima.com/wp-content/uploads/2022/07/takhan.pdfIn PDF document text
  • http://www.medvedy.cz/photoshop-2022/In PDF document text
  • https://social.halvsie.com/upload/files/2022/07/dJPa83tzMhWERvDT5Eqk_01_a9f9d234701e0ab37409d44c27ccf1af_file.pdfIn PDF document text
  • https://dunstew.com/advert/adobe-photoshop-2022-version-23-0-crack-file-only-pc-windows-march-2022/In PDF document text
  • https://www.enveth.gr/advert/adobe-photoshop-cc-2018-version-19-crack-latest-2022/In PDF document text
  • https://chuchoola.fun/?u=k8pp605In PDF document text
  • https://seecurrents.com/wp-content/uploads/2022/06/Photoshop_2021_Version_2231_Crack__Activation_Code__Free.pdfIn PDF document text
  • https://patago.cl/wp-content/uploads/2022/07/seliore.pdfIn PDF document text
  • https://believewedding.com/wp-content/uploads/2022/07/Adobe_Photoshop_CC_2015_version_17.pdfIn PDF document text
  • http://dottoriitaliani.it/ultime-notizie/salute/adobe-photoshop-2022-version-23-0-2-with-license-key-license-code-keygen-In PDF document text
  • https://stinger-live.s3.amazonaws.com/upload/files/2022/07/tcBDACo9NqUYP9KWMJ9T_01_c540925ab3ddc075532bac203In PDF document text
  • https://social.halvsie.com/upload/files/2022/07/dJPa83tzMhWERvDT5Eqk_01_a9f9d234701e0ab37409d44c27ccf1af_file.pdIn PDF document text
  • http://awarefinance.com/zg93bmxvywr8d3q2wvrwbmnuedhnvfkxtmpzd05estnoshg4twpvm05iedhlrtbwsuhkbflxuxrzbxh2wnlcyljtrnpkq0jiulu1za/dennise.qwrvymugughvdg9zag9widiwmjegkfzlcnnpb24gmjiunskqwr.arithmetical/cluster.occasions/fallas.grassfire.hypertensionIn PDF document text
  • http://www.tcpdf.orgIn PDF document text
  • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
  • http://purl.org/dc/elements/1.1/In PDF document text
  • http://ns.adobe.com/xap/1.0/In PDF document text
  • http://ns.adobe.com/pdf/1.3/In PDF document text
  • http://ns.adobe.com/xap/1.0/mm/In PDF document text
  • http://www.aiim.org/pdfa/ns/extension/In PDF document text
  • http://www.aiim.org/pdfa/ns/schema#In PDF document text
  • http://www.aiim.org/pdfa/ns/property#In PDF document text
  • http://www.aiim.org/pdfa/ns/id/In PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.