Malicious PDF — malware analysis report

Heuristics 4

• Cracked-software lure uses download-gateway redirectors high PDF_CRACKED_SOFTWARE_REDIRECTOR_LINK_FARM
  PDF contains multiple cracked-software/keygen/serial-key lure links together with long encoded download-gateway URLs or known crack-download redirector hosts. This is stronger than generic piracy vocabulary: the document is an SEO lure that funnels users through redirect/download infrastructure commonly used for adware, unwanted software, or droppers.
• PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LURE
  PDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
• External URI info PDF_URI
  PDF contains an external URL action
• Embedded URL info EMBEDDED_URL
  One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
  URL http://emailgoal.com/bored/dellutri.VGhlIEN1bGxpbmcgT2YgVGhlIENvd3MVGh?profitable=unconvicted&ZG93bmxvYWR8NHZNTTNCdGRueDhNVFkxT0RJeU1EZzJObng4TWpVNU1IeDhLRTBwSUZkdmNtUndjbVZ6Y3lCYldFMU1VbEJESUZZeUlGQkVSbDA=spirit= PDF link annotation

  • https://bodhibliss.org/euro-fishing-mem-patch-activation-code-with-keygen-x64/In PDF document text
  • http://persemediagroup.com/tiger-fighter-1931-toratora-mp055-trainer-license-key-x64/In PDF document text
  • https://coleccionohistorias.com/wp-content/uploads/2022/07/cornolu.pdfIn PDF document text
  • http://www.claseco.com/wp-content/uploads/2022/07/ivantam.pdfIn PDF document text
  • http://touchdownhotels.com/l������-stopsign-hack-mod-with-product-key-x64/In PDF document text
  • http://jaxskateclub.org/2022/07/19/the-adventures-of-kusoge-product-key-download-latest-2022/In PDF document text
  • http://pepsistars.com/color-guardian-soundtrack-cheat-code-updated-2022/In PDF document text
  • https://imfomix.com/wp-content/uploads/2022/07/neliota.pdfIn PDF document text
  • http://www.jobverliebt.de/wp-content/uploads/sundav.pdfIn PDF document text
  • https://www.greatescapesdirect.com/2022/07/anvil-premium-pass-boost-keygen-crack-setup-free-download-for-pc/In PDF document text
  • http://angkasydney.org/mystery-of-island-cheat-code-free-x64/In PDF document text
  • http://someuae.com/wp-content/uploads/2022/07/dechjon.pdfIn PDF document text
  • https://negociosinmobiliariosdemexico.com/wp-content/uploads/2022/07/MrsSantas_Gift_Hunt__Hairstyle_Cheat_Code_With_Full_Keygen_MacWin_Latest_2022.pdfIn PDF document text
  • https://www.travelmindsets.com/wp-content/uploads/2022/07/natyep.pdfIn PDF document text
  • https://kramart.com/rtk13-gamecity-online-user-registration-aafafaafafafaafceoecaafacafafsafafaf-trainer-activator-download-pc-windows/In PDF document text
  • https://reseauspiral.org/wp-content/uploads/2022/07/Mob_Hunter_Hack_MOD.pdfIn PDF document text
  • https://dcu.education/wp-content/uploads/2022/07/Radiant_Ascent_VR_Hack_MOD.pdfIn PDF document text
  • https://donin.com.br/advert/rtk14-nijisanji-vtubers-quotkuzuha-sister-claire-and-debidebi-debiru-quot-collaboration-officer-data-hack-mod-free-download/In PDF document text
  • https://instantitschool.com/fantasy-grounds-a19-incandiums-eruption-pfrpg-full-license-download/In PDF document text
  • https://africanscientists.africa/wp-content/uploads/2022/07/Indie_Pogo_MoneyThemed_Emblems_Crack_With_Serial_Number__Free.pdfIn PDF document text
  • https://bodhibliss.org/euro-fishing-mem-patch-activation-code-with-In PDF document text
  • http://persemediagroup.com/tiger-fighter-1931-toratora-mp055-trainer-In PDF document text
  • http://touchdownhotels.com/l������-stopsign-hack-mod-with-product-key-In PDF document text
  • http://jaxskateclub.org/2022/07/19/the-adventures-of-kusoge-product-In PDF document text
  • http://pepsistars.com/color-guardian-soundtrack-cheat-code-In PDF document text
  • https://www.greatescapesdirect.com/2022/07/anvil-premium-pass-boost-In PDF document text
  • https://negociosinmobiliariosdemexico.com/wp-content/uploads/2022/0In PDF document text
  • https://www.travelmindsets.com/wp-In PDF document text
  • https://kramart.com/rtk13-gamecity-online-user-registration-aafafaafafaIn PDF document text
  • https://reseauspiral.org/wp-In PDF document text
  • https://dcu.education/wp-In PDF document text
  • https://donin.com.br/advert/rtk14-nijisanji-vtubers-quotkuzuha-sister-claIn PDF document text
  • https://instantitschool.com/fantasy-grounds-a19-incandiums-eruption-In PDF document text
  • https://africanscientists.africa/wp-content/uploads/2022/07/Indie_Pogo_In PDF document text
  • http://emailgoal.com/bored/dellutri.vghlien1bgxpbmcgt2ygvghlienvd3mvgh?profitable=unconvicted&zg93bmxvywr8nhznttncdgruedhnvfkxt0rjeu1ezzjobng4twpvnu1iedhlrtbwsuzkdmntundjbvz6y3lcyldfmu1vbejesuzzeulgqkvsbda=spirit=In PDF document text
  • http://www.tcpdf.orgIn PDF document text
  • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
  • http://purl.org/dc/elements/1.1/In PDF document text
  • http://ns.adobe.com/xap/1.0/In PDF document text
  • http://ns.adobe.com/pdf/1.3/In PDF document text
  • http://ns.adobe.com/xap/1.0/mm/In PDF document text
  • http://www.aiim.org/pdfa/ns/extension/In PDF document text
  • http://www.aiim.org/pdfa/ns/schema#In PDF document text
  • http://www.aiim.org/pdfa/ns/property#In PDF document text
  • http://www.aiim.org/pdfa/ns/id/In PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.