Malicious PDF — malware analysis report

Heuristics 5

• Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
  Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
• Cracked-software lure uses download-gateway redirectors high PDF_CRACKED_SOFTWARE_REDIRECTOR_LINK_FARM
  PDF contains multiple cracked-software/keygen/serial-key lure links together with long encoded download-gateway URLs or known crack-download redirector hosts. This is stronger than generic piracy vocabulary: the document is an SEO lure that funnels users through redirect/download infrastructure commonly used for adware, unwanted software, or droppers.
• PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LURE
  PDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
• External URI info PDF_URI
  PDF contains an external URL action
• Embedded URL info EMBEDDED_URL
  One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
  URL http://emailgoal.com/artisan/?broughton=draniki/urbanlegendsaabout.ntdr&louie=ZG93bmxvYWR8dWcyZFdObmRYeDhNVFkxT0RJeE9EazROWHg4TWpVNU1IeDhLRTBwSUZkdmNtUndjbVZ6Y3lCYldFMU1VbEJESUZZeUlGQkVSbDA/milers.ZW1pbGlvIHB1am9sIGd1aXRhciBtZXRob2QgcGRmIGZyZWUZW1 PDF link annotation

  • https://efekt-metal.pl/witaj-swiecie/In PDF document text
  • https://floridachiropracticreport.com/advert/rising-storm-2-vietnam-pulling-rank-cosmetic-dlc-activation-code-ativador-2021/In PDF document text
  • https://s3-us-west-2.amazonaws.com/mmoldata/wp-content/uploads/2022/07/26002509/Extreme_Karaoke_V3_Full_Crack_Hardlockbfdcml_HOT.pdfIn PDF document text
  • https://shi-id.com/ipvideotranscodinglivev532/In PDF document text
  • https://laissezfairevid.com/simpo-pdf-merge-and-split-v2-2-2-winall-incl-2021-keygen-fallen-tord-rar/In PDF document text
  • http://www.b3llaphotographyblog.com/juliet-sex-session-serial-key-top/In PDF document text
  • https://www.tahrirnet.com/wp-content/uploads/2022/07/ellmgit.pdfIn PDF document text
  • https://ksycomputer.com/wp-content/uploads/2022/07/Embarcadero_Codegear_Rad_Studio_2010_Crack_Extra_Quality-1.pdfIn PDF document text
  • https://www.milieu-mag.com/wp-content/uploads/2022/07/The_Race_3_Full_Movie_Hd_1080p_In_Hindi.pdfIn PDF document text
  • https://jyotienterprises.net/wp-content/uploads/2022/07/Design_Expert_8_Cracked_Version_Of_Technic_26.pdfIn PDF document text
  • https://progressivehealthcareindia.com/2022/07/26/drakensang-online-hack-tool-3-24-137-free/In PDF document text
  • http://sturgeonlakedev.ca/2022/07/26/dany-pc-909-driver-free-download-hot/In PDF document text
  • https://mentorus.pl/winpe-10-8-sergei-strelec-x86-x64-march-2018-new-serial-key-link/In PDF document text
  • https://www.academiahowards.com/wp-content/uploads/2022/07/hoyle_board_games_2002_free_download_full_11.pdfIn PDF document text
  • https://believewedding.com/2022/07/26/vistitle-2-5-full-_best_-cracked/In PDF document text
  • https://kenosus.com/wp-content/uploads/2022/07/marksib.pdfIn PDF document text
  • https://divyendurai.com/download-xforce-keygen-autocad-lt-2012-activation-new/In PDF document text
  • http://fricknoldguys.com/free-download-shin-chan-movie-adventures-in-henderland-in-hindi/In PDF document text
  • http://jwbotanicals.com/wp-content/uploads/2022/07/TicketBench_Enterprise_616H33Tsuperl_Setup_Free.pdfIn PDF document text
  • https://shippingcasesnow.com/wp-content/uploads/Corel_Draw_X5_Crack_VERIFIED_Psikey.pdfIn PDF document text
  • https://floridachiropracticreport.com/advert/rising-storm-2-vietnam-pulling-rank-In PDF document text
  • https://s3-us-west-2.amazonaws.com/mmoldata/wp-content/uploads/2022/07/2600250In PDF document text
  • https://laissezfairevid.com/simpo-pdf-merge-and-split-v2-2-2-winall-incl-2021-keygen-In PDF document text
  • https://ksycomputer.com/wp-content/uploads/2022/07/Embarcadero_Codegear_Rad_StIn PDF document text
  • https://www.milieu-mag.com/wp-In PDF document text
  • https://jyotienterprises.net/wp-In PDF document text
  • https://progressivehealthcareindia.com/2022/07/26/drakensang-online-hack-In PDF document text
  • https://mentorus.pl/winpe-10-8-sergei-strelec-x86-x64-march-2018-new-serial-key-In PDF document text
  • https://www.academiahowards.com/wp-In PDF document text
  • http://fricknoldguys.com/free-download-shin-chan-movie-adventures-in-henderland-in-In PDF document text
  • http://jwbotanicals.com/wp-In PDF document text
  • https://shippingcasesnow.com/wp-In PDF document text
  • http://emailgoal.com/artisan/?broughton=draniki/urbanlegendsaabout.ntdr&louie=zg93bmxvywr8dwcyzfdobmryedhnvfkxt0rjee9eazrowhg4twpvnu1iedhlrtbwsuzkdmntundjbvz6y3lcyldfmu1vbejesuzzeulgqkvsbda/milers.zw1pbglvihb1am9sigd1axrhcibtzxrob2qgcgrmigzyzwuzw1In PDF document text
  • http://www.tcpdf.orgIn PDF document text
  • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
  • http://purl.org/dc/elements/1.1/In PDF document text
  • http://ns.adobe.com/xap/1.0/In PDF document text
  • http://ns.adobe.com/pdf/1.3/In PDF document text
  • http://ns.adobe.com/xap/1.0/mm/In PDF document text
  • http://www.aiim.org/pdfa/ns/extension/In PDF document text
  • http://www.aiim.org/pdfa/ns/schema#In PDF document text
  • http://www.aiim.org/pdfa/ns/property#In PDF document text
  • http://www.aiim.org/pdfa/ns/id/In PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.