CLEAN
4
Risk Score
Malware Insights
MITRE ATT&CK
T1566.002 Spearphishing Attachment
T1059.001 PowerShell
The PDF document contains an embedded URI pointing to 'http://extrememusclenutrition.com/images/Nutrition/Direct.php'. This URL is likely used to redirect the user to a malicious site, potentially for phishing or malware delivery. No scripts were extracted, limiting the ability to determine further actions.
Machine Learning
- Nyx PDF Classifier clean score 0.0107
Heuristics 2
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://extrememusclenutrition.com/images/Nutrition/Direct.php PDF link annotation
- https://privacy.microsoft.com/en-us/privacystatementIn PDF document text
Open this report in the interactive analyzer, or submit your own file for analysis.