Malicious PDF — malware analysis report

Heuristics 5

• Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
  Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
• PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LURE
  PDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
• Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTON
  Document contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
• External URI info PDF_URI
  PDF contains an external URL action
• Embedded URL info EMBEDDED_URL
  One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
  URL http://thedirsite.com/attacksexam.forever?metalbolism=ZG93bmxvYWR8R205YWpCaWNueDhNVFkxTmpjM01UZ3hPSHg4TWpVM05IeDhLRTBwSUhKbFlXUXRZbXh2WnlCYlJtRnpkQ0JIUlU1ZA/polyneuropathy/presumed/carnivale/snowboards/Q29yZTEwayBLZXlnZW4gSG93IFRvIFVzZQQ29

  • https://film-cue.com/wp-content/uploads/2022/07/karlsal.pdf
  • https://tgmcn.com/wp-content/uploads/2022/07/Adobe_Indesign_CC_2019_1400_x64_Crack_Serial_Key.pdf
  • https://www.webcard.irish/wp-content/uploads/2022/07/dalpayn.pdf
  • https://festivaldelamor.org/the-accountant-full-top-movie-in-hindi-free-download/
  • https://cdn.lyv.style/wp-content/uploads/2022/07/03061756/Camtasia_Studio_201908_Crack_With_License_Key_Free_Download_.pdf
  • https://www.trendcorporate.com.au/sites/default/files/webform/millphi550.pdf
  • https://maszatmaraton.hu/wp-content/uploads/2022/07/noor_ul_irfan_pdf_download.pdf
  • https://landings.org/sites/default/files/webform/shamyar841.pdf
  • http://www.bayislistings.com/grade-7-math-textbook-nelson-pdf-download-portable/
  • https://streamers.worldmoneybusiness.com/advert/drnajeebneuroanatomytorrent/
  • https://moulderp.it/watchdogbadbloodskidrowtop-crack/
  • https://chickenrecipeseasy.top/2022/07/03/bifilter-2-v2-3-x64-x86-vst-au-win-mac-full-updated-retail/
  • https://www.puremeditation.org/wp-content/uploads/Lyndacom_Revit_Architecture_The_Family_Editor_Torrenttorrent.pdf
  • https://missionmieuxetre.com/2022/07/03/devexpress-12-1-4-crack-15-top/
  • https://promwad.com/sites/default/files/webform/tasks/manualwashingtondecirugiapdf.pdf
  • https://www.beatschermerhorn.com/?p=10773
  • https://in-loving-memory.online/terjemahan-kitab-mantiq-pdf-14-best/
  • https://verrtise.com/advert/adobelightroom5serialnumbercrack512-best/
  • https://cdn.lyv.style/wp-content/uploads/2022/07/03061756/camtasia_studio_201908_crack_with_license_key_free_download_.pdf
  • https://emealjobs.nttdata.com/en/system/files/webform/teneben757.pdf
  • https://shadygrove.umd.edu/system/files/webform/Download-Font-Vniromansshx.pdf
  • http://www.tcpdf.org
  • http://www.w3.org/1999/02/22-rdf-syntax-ns#
  • http://purl.org/dc/elements/1.1/
  • http://ns.adobe.com/xap/1.0/
  • http://ns.adobe.com/pdf/1.3/
  • http://ns.adobe.com/xap/1.0/mm/
  • http://www.aiim.org/pdfa/ns/extension/
  • http://www.aiim.org/pdfa/ns/schema#
  • http://www.aiim.org/pdfa/ns/property#
  • http://www.aiim.org/pdfa/ns/id/

Open this report in the interactive analyzer, or submit your own file for analysis.