Malicious PDF — malware analysis report

Heuristics 3

• ClamAV: Pdf.Phishing.TtraffRobotInstall-7605656-0 critical CLAMAV_DETECTION
  ClamAV detected this file as malware: Pdf.Phishing.TtraffRobotInstall-7605656-0
• Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
  Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
• Embedded URL info EMBEDDED_URL
  One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
  URL http://paxpokemonleague.com/uploads/1/3/0/8/130874432/vebuk.pdf In PDF document text

  • http://theotherevilsister.com/uploads/1/3/0/7/130776605/dedaku.pdfIn PDF document text
  • http://strategicdonations.com/uploads/1/3/0/7/130739907/578f9dfd7a3.pdfIn PDF document text
  • http://quantumlearningroup.com/uploads/1/3/0/2/130288448/9670133.pdfIn PDF document text
  • http://firstretrospective.com/uploads/1/3/0/2/130272937/dejufal.pdfIn PDF document text
  • http://thatcherodyssey.com/uploads/1/3/0/5/130588830/ronenawinudi-zokupovuf.pdfIn PDF document text
  • http://imxventures.net/uploads/1/3/0/6/130639755/mikadok.pdfIn PDF document text
  • http://thejanfund.com/uploads/1/3/0/7/130775528/fatuvirevilomije.pdfIn PDF document text
  • http://www.justahomestead.com/uploads/1/3/0/7/130775876/0518e510c94ea.pdfIn PDF document text
  • http://www.vaughnchapelmbc.com/uploads/1/3/0/7/130740235/bikizigijasapigig.pdfIn PDF document text
  • http://newdaytherapies.com/uploads/1/3/0/3/130323208/31b05c08df.pdfIn PDF document text
  • http://milegion-legacyrun.org/uploads/1/3/0/8/130813489/fd6459.pdfIn PDF document text
  • http://www.breakthegap.org/uploads/1/3/0/6/130603853/nuvikujo_zowenorowozim_vexavepep.pdfIn PDF document text
  • http://osievents.com/uploads/1/3/0/7/130775033/2910023.pdfIn PDF document text
  • http://newspinmeasure.net/uploads/1/3/0/4/130483136/leranofijar.pdfIn PDF document text
  • http://chinafeeling.ch/uploads/1/3/0/6/130620751/janajulumuta.pdfIn PDF document text
  • http://classickalamazooshirts.com/uploads/1/3/0/4/130436258/4c8efa42b9ff552.pdfIn PDF document text
  • http://mikekelley.us/uploads/1/3/0/8/130814020/rolikikanutemizev.pdfIn PDF document text
  • http://www.capecoralkayak.com/uploads/1/3/0/7/130740401/130740401.html#dk+goel+solutions+class+11+2019+chapter+16In PDF document text
  • http://dejavu.sourceforge.netIn extracted file (font_00_sfnt_off00002a97.bin)
  • http://dejavu.sourceforge.net/wiki/index.php/LicenseIn extracted file (font_00_sfnt_off00002a97.bin)

Open this report in the interactive analyzer, or submit your own file for analysis.