Malicious PDF — malware analysis report

Heuristics 5

• Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
  Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
• Clickable URI points to raw IP address medium PDF_URI_IP_LITERAL
  PDF contains a clickable HTTP(S) action whose host is a literal IPv4 address. Legitimate documents normally link to named domains; raw-IP destinations are common in disposable phishing and malware-delivery infrastructure.
• Small PDF is a non-clustered link farm on disposable hosting medium PDF_SEO_DISPOSABLE_LINK_FARM
  Small PDF contains many clickable external PDF links spread thin across many distinct hosts (no single dominant host), corroborated by a utm_term SEO-redirector link and/or links parked on free/disposable content hosts. This is the 'free document/template' SEO phishing PDF family, which ranks for search queries and routes users into payload/redirect chains, rather than a normal document citation pattern. The PDF itself carries no exploit — the risk is the linked destinations.
• External URI info PDF_URI
  PDF contains an external URL action
• Embedded URL info EMBEDDED_URL
  One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
  URL https://tlniurl.com/2sCxgJ PDF link annotation

  • https://openaidmap.com/ag-book-pro-font-free-14/In PDF document text
  • https://bukitaksara.com/7th-sense-full-movie-download/In PDF document text
  • http://vglybokaye.by/advert/microsoft-visual-studio-2010-free-download-full-version-with-crack-cracked/In PDF document text
  • https://africa2australia.com/2023/01/14/wavelab-7-7-2-1-600-crack-serial-keygen/In PDF document text
  • https://beznaem.net/wp-content/uploads/2023/01/stavbarr.pdfIn PDF document text
  • https://breathelifebr.org/wp-content/uploads/2023/01/Miss-Teacher-3-Tamil-Dubbed-Movie-Free-Download.pdfIn PDF document text
  • https://livehealthynews.com/wp-content/uploads/2023/01/La-Ricerca-Del-Pensiero-3apdf-UPD.pdfIn PDF document text
  • http://itsasistahthing.com/?p=4541In PDF document text
  • http://3.16.76.74/advert/sniper-ghost-warrior-2-siberian-strike-dlc-game-download-link/PDF link annotation
  • http://jwbotanicals.com/taj-mahal-a-monument-of-love-3-movie-in-hindi-free-download-3gp/In PDF document text
  • https://multipanelwallart.com/wp-content/uploads/2023/01/eostbern.pdfIn PDF document text
  • https://susanpalmerwood.com/wp-content/uploads/2023/01/darwyk.pdfIn PDF document text
  • http://www.landtitle.info/wp-content/uploads/2023/01/Diljale_Full_Movie_Hd_Download_Utorrent_61.pdfIn PDF document text
  • https://vaveyan.com/wp-content/uploads/2023/01/isabett.pdfIn PDF document text
  • https://instafede.com/wp-content/uploads/2023/01/xyridal.pdfIn PDF document text
  • https://shalamonduke.com/dil-pardesi-ho-gayaa-full-movie-download-1080p-hot/In PDF document text
  • https://freelance-difference.com/wp-content/uploads/2023/01/Gauraiya-2-Download-HOT-Movie-Free.pdfIn PDF document text
  • https://endlessorchard.com/download-world-of-subways-vol-3-key-generator-repack/In PDF document text
  • http://kantinonline2017.com/?p=16224In PDF document text
  • https://foam20.com/wp-content/uploads/2023/01/serstef.pdfIn PDF document text
  • http://vglybokaye.by/advert/microsoft-visual-studio-2010-free-download-full-version-with-crack-crackIn PDF document text
  • https://breathelifebr.org/wp-content/uploads/2023/01/Miss-Teacher-3-Tamil-Dubbed-Movie-Free-DowIn PDF document text
  • http://www.landtitle.info/wp-content/uploads/2023/01/Diljale_Full_Movie_Hd_Download_Utorrent_61In PDF document text
  • https://freelance-difference.com/wp-content/uploads/2023/01/Gauraiya-2-Download-HOT-Movie-FreeIn PDF document text
  • http://dejavu.sourceforge.netIn extracted file (stream_003_off00002d99.bin)
  • http://dejavu.sourceforge.net/wiki/index.php/LicenseIn extracted file (stream_003_off00002d99.bin)

Open this report in the interactive analyzer, or submit your own file for analysis.