MALICIOUS
94
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
The file is identified as malicious by ML classifiers and ClamAV, specifically as a phishing trojan. It contains an embedded URL that directs users to a suspicious domain, likely for malicious purposes. The document body, though heavily obfuscated, contains metadata suggesting it was generated by wkhtmltopdf and references 'The game of thrones season 1 episode 4', indicating a lure to entice users to click the malicious link.
Machine Learning
- Nyx PDF Classifier malicious score 0.6621
Heuristics 3
-
ClamAV: Pdf.Phishing.Trojan-d2528dad23a95d95-d2528dad23a95d95-10044376-0 critical CLAMAV_DETECTIONClamAV detected this file as malware: Pdf.Phishing.Trojan-d2528dad23a95d95-d2528dad23a95d95-10044376-0
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL https://huntic.ru/pbw?utm_term=the+game+of+thrones+season+1+episode+4
- https://static.s123-cdn-static.com/uploads/4452608/normal_5fcbea01e4f06.pdf
- https://static.s123-cdn-static.com/uploads/4374703/normal_5fc94f93f2514.pdf
- https://cdn-cms.f-static.net/uploads/4465924/normal_6060f6ccf0a9b.pdf
- https://static.s123-cdn-static.com/uploads/4379476/normal_5fca2a99337d6.pdf
- https://cdn-cms.f-static.net/uploads/4481515/normal_602214355627e.pdf
- https://static.s123-cdn-static-d.com/uploads/4481418/normal_60b1e9525c727.pdf
- https://cdn-cms.f-static.net/uploads/4381541/normal_5fd1a86368144.pdf
- https://cdn-cms.f-static.net/uploads/4445531/normal_602f52ce26e8f.pdf
- https://cdn-cms.f-static.net/uploads/4454822/normal_6009d869a6f21.pdf
- https://static.s123-cdn-static.com/uploads/4428033/normal_5ff1760385500.pdf
- https://static.s123-cdn-static.com/uploads/4405185/normal_5fcbfa8aec060.pdf
- https://cdn-cms.f-static.net/uploads/4393208/normal_603bdf6ac651a.pdf
- https://cdn-cms.f-static.net/uploads/4486772/normal_603ed10369fab.pdf
- https://cdn-cms.f-static.net/uploads/4425484/normal_5fd36ee539338.pdf
- https://cdn-cms.f-static.net/uploads/4403816/normal_606c681be31ba.pdf
- https://uploads.strikinglycdn.com/files/9c6f3b47-c8ca-46f4-9c35-1fbabdeb4e4c/to_kill_a_mockingbird_audiobook_chapter_6.pdf
- https://uploads.strikinglycdn.com/files/2177dd60-f937-4d02-bce2-758cfc925e7b/what_is_the_best_keto_book_to_buy.pdf
- https://uploads.strikinglycdn.com/files/73121f5f-b019-4190-beaa-20c9d0eb4d5a/how_much_does_ncaa_14_cost_on_xbox_360.pdf
- http://jajisaparev.pbworks.com/w/file/fetch/144418398/twrp_3.0_2_apk_download.pdf
- https://uploads.strikinglycdn.com/files/2c83019f-748c-4cac-bbc6-4a5d06946f68/sharepoint_2013_designer_permissions.pdf
- http://wozixokumo.pbworks.com/f/60066791209.pdf
- https://uploads.strikinglycdn.com/files/e8b584c8-18aa-4949-b775-198168ab11a9/how_to_chop_samples_in_garageband_ios.pdf
Open this report in the interactive analyzer, or submit your own file for analysis.