MALICIOUS
242
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
T1203 Exploitation for Client Execution
The PDF contains a large number of embedded links, many of which point to disposable domains or known redirectors, indicating a link farm designed to lead users to malicious sites. The ClamAV detection and ML classifier further support its malicious nature, likely as a phishing or redirection tool.
Machine Learning
- Nyx PDF Classifier malicious score 0.8335
Heuristics 5
-
ClamAV: Pdf.Phishing.Trojan-d2568dad23a94d95-d2568dad23a94d95-10044375-0 critical CLAMAV_DETECTIONClamAV detected this file as malware: Pdf.Phishing.Trojan-d2568dad23a94d95-d2568dad23a94d95-10044375-0
-
PDF links to known malicious redirector infrastructure critical PDF_MALICIOUS_REDIRECTOR_LINKPDF contains a clickable URI to redirector infrastructure used by a known malicious PDF SEO/adware delivery campaign. These documents typically rely on user interaction and redirect chains rather than a PDF parser vulnerability.
-
Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARMSmall PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
-
Small PDF is a non-clustered link farm on disposable hosting medium PDF_SEO_DISPOSABLE_LINK_FARMSmall PDF contains many clickable external PDF links spread thin across many distinct hosts (no single dominant host), corroborated by a utm_term SEO-redirector link and/or links parked on free/disposable content hosts. This is the 'free document/template' SEO phishing PDF family, which ranks for search queries and routes users into payload/redirect chains, rather than a normal document citation pattern. The PDF itself carries no exploit — the risk is the linked destinations.
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL https://crophysi.ru/strik?utm_term=onkyo+tx-8160+manual In PDF document text
- http://help-ruleviolation.com/astro_boy_1980_episode_guideh1rig.pdfIn PDF document text
- http://thepropheticapp.com/garmin_vivosmart_3_bluetooth_issuesvulgt.pdfIn PDF document text
- http://itawegan.space/bill_nye_rocks_and_minerals_worksheetdo1pz.pdfIn PDF document text
- https://s3.amazonaws.com/fadupazageraf/my_secret_love_sheet_music.pdfIn PDF document text
- http://idealica-italiaoficial.site/amsco_apush_chapter_13_answershwlr2.pdfIn PDF document text
- https://s3.amazonaws.com/zobuwubedak/54601315722.pdfIn PDF document text
- https://s3.amazonaws.com/wupuxus/6967698926.pdfIn PDF document text
- http://rixorevu.getenjoyment.net/8212137658.pdfIn PDF document text
- http://theplafond.xyz/discord_nitro_free_crackge5ob.pdfIn PDF document text
- http://xijipeva.mypressonline.com/mv_cable_sizing_calculation.pdfIn PDF document text
- https://s3.amazonaws.com/pipaneku/imperative_form_german_vergessen.pdfIn PDF document text
- https://uploads.strikinglycdn.com/files/1d1e7f7c-aaf8-40b0-812c-e3bd17b8a5b1/4720356597.pdfIn PDF document text
- https://uploads.strikinglycdn.com/files/81b231e0-a2fa-457c-91df-386da839eeeb/el_desafo_del_amor_40_das_pelcula_completa.pdfIn PDF document text
- https://01ff271a-2d66-4e22-ac0f-a796646d2f56.filesusr.com/ugd/8d93e9_bd8eb0c6bd554719b69186595052dabf.pdf?index=trueIn PDF document text
- https://uploads.strikinglycdn.com/files/2816129e-c87c-4659-95a3-ea3e4b473fe4/when_should_you_send_evening_wedding_invitations.pdfIn PDF document text
- https://uploads.strikinglycdn.com/files/05d79279-0d3e-4f55-81a8-168f891964d4/dejuxinapovanututiz.pdfIn PDF document text
- https://uploads.strikinglycdn.com/files/7316b961-fdb0-4104-ab4b-42350085938f/which_carolina_herrera_good_girl_perfume_is_the_best.pdfIn PDF document text
- https://6bb2b61b-82bf-473b-8365-63ddb02ddbdd.filesusr.com/ugd/d55797_7a5f034c3fa542799fafb4e0826f792b.pdf?index=trueIn PDF document text
- https://uploads.strikinglycdn.com/files/93b1286c-a7ac-454c-b618-539e0678a919/the_hunger_game_part_2_download_in_hindi.pdfIn PDF document text
- https://uploads.strikinglycdn.com/files/f4350bfc-6f63-488c-8f28-2588bfb96c0c/how_to_use_ninja_single_serve_blender.pdfIn PDF document text
- https://uploads.strikinglycdn.com/files/2e82b7b0-3d05-469b-8d91-f0c4f785843a/what_is_the_moral_of_the_story_why_mosquitoes_buzz_in_peoples_ears.pdfIn PDF document text
- https://uploads.strikinglycdn.com/files/2603671f-b22a-471c-b59a-d92990fbe2fc/how_to_reset_a_samsung_dishwasher.pdfIn PDF document text
- https://07d68bf2-0661-47e2-9ffe-eae068a071af.filesusr.com/ugd/fef806_3c65fac2a4d645bf91ad25320c73fb04.pdf?index=trueIn PDF document text
- https://uploads.strikinglycdn.com/files/a155cfd8-854e-441c-9ca7-c4a740c63f25/98775997593.pdfIn PDF document text
Open this report in the interactive analyzer, or submit your own file for analysis.