Malicious PDF — malware analysis report

Heuristics 5

• Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
  Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
• Cracked-software lure uses download-gateway redirectors high PDF_CRACKED_SOFTWARE_REDIRECTOR_LINK_FARM
  PDF contains multiple cracked-software/keygen/serial-key lure links together with long encoded download-gateway URLs or known crack-download redirector hosts. This is stronger than generic piracy vocabulary: the document is an SEO lure that funnels users through redirect/download infrastructure commonly used for adware, unwanted software, or droppers.
• PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LURE
  PDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
• External URI info PDF_URI
  PDF contains an external URL action
• Embedded URL info EMBEDDED_URL
  One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
  URL http://starsearchtool.com/asteromella?confections=naves&TGVrdHlyYSBTaGtvbGxvcmUgOCBMdXRqZXQgRSBNYnJlbWplcyBLdXB0aW1pcmFyTGV=harshness&herpetic=ZG93bmxvYWR8djZxTVdvM01XTjhmREUyTmpJMk9EQXpPVEI4ZkRJMU9UQjhmQ2hOS1NCWGIzSmtjSEpsYzNNZ1cxaE5URkpRUXlCV01pQlFSRVpk&initiators= PDF link annotation

  • https://best-housing.nl/wp-content/uploads/2022/09/Padmaavat_2_BETTER_Download_720p_Movie.pdfIn PDF document text
  • https://budgetparticipatifnivernais.fr/wp-content/uploads/2022/09/landsil.pdfIn PDF document text
  • http://www.giffa.ru/internet-businesssite-promotion/pearl-harbor-movie-720p-tamil-dubbed-torrent-updated/In PDF document text
  • https://infraovensculinary.com/wp-content/uploads/2022/09/glenlara.pdfIn PDF document text
  • https://techstoserve.com/wp-content/uploads/2022/09/furivi.pdfIn PDF document text
  • https://ayusya.in/honda-cbr-600-rr-pc40-bedienungsanleitung-deutsch/In PDF document text
  • https://xn--80aagyardii6h.xn--p1ai/hd-online-player-pandaga-chesko-telugu-link-full-movie-dow/In PDF document text
  • http://www.abbotsfordtoday.ca/wp-content/uploads/2022/09/Microsoft_Office_2007_Arabic_Extra_Quality_Free_Download_Full_Version.pdfIn PDF document text
  • https://buycoffeemugs.com/crack-free-matchware-mindview-5-0-152-business-edition-patch-mpt/In PDF document text
  • https://blagik.com/wp-content/uploads/2022/09/solucionarioserway5ediciontomo2.pdfIn PDF document text
  • https://alafdaljo.com/wp-content/uploads/2022/09/answerkeyenglishforbusinessstudiesthirdeditionianmackenzie20.pdfIn PDF document text
  • https://miniwho.com/wp-content/uploads/2022/09/Adobe_Premiere_Pro_CC_20153_1030_202_RePack_By_Dakov_EN_HOT-1.pdfIn PDF document text
  • http://thai-news.net/?p=35370In PDF document text
  • https://whatshappeningtoday.com/wp-content/uploads/2022/09/Free_Download_The_Fashion_Sketchbook_By_Bina_Ablingrar.pdfIn PDF document text
  • https://hazmatsociety.org/wp-content/uploads/2022/09/Probuditedivausebipdfdownload_UPD.pdfIn PDF document text
  • https://www.15heures.com/photos/p/97465In PDF document text
  • https://calibikemedia.s3.us-west-1.amazonaws.com/wp-content/uploads/2022/09/12220148/vasemel.pdfIn PDF document text
  • https://prelifestyles.com/wp-content/uploads/2022/09/VLC_Lista_Arena_Sport_Setup_Freel-1.pdfIn PDF document text
  • https://hospiclinicsas.com/wp-content/uploads/2022/09/CommandAndConquerRedAlert3Update112crack_WORKedProperBAT_CPY.pdfIn PDF document text
  • https://www.yapidurealestate.com/age-of-empires-2-the-conquerors-crack-indir-hot/In PDF document text
  • https://best-housing.nl/wp-In PDF document text
  • http://www.giffa.ru/internet-businesssite-promotion/pearl-harbor-movie-720p-tamil-dubbed-In PDF document text
  • https://xn--80aagyardii6h.xn--p1ai/hd-online-player-pandaga-chesko-telugu-link-full-movie-In PDF document text
  • http://www.abbotsfordtoday.ca/wp-content/uploads/2022/09/Microsoft_Office_2007_Arabic_In PDF document text
  • https://buycoffeemugs.com/crack-free-matchware-mindview-5-0-152-business-edition-In PDF document text
  • https://alafdaljo.com/wp-content/uploads/2022/09/answerkeyenglishforbusinessstudiesthirdIn PDF document text
  • https://miniwho.com/wp-content/uploads/2022/09/Adobe_Premiere_Pro_CC_20153_1030_20In PDF document text
  • https://whatshappeningtoday.com/wp-In PDF document text
  • https://hazmatsociety.org/wp-In PDF document text
  • https://calibikemedia.s3.us-west-1.amazonaws.com/wp-In PDF document text
  • https://prelifestyles.com/wp-In PDF document text
  • https://hospiclinicsas.com/wp-content/uploads/2022/09/CommandAndConquerRedAlert3UpIn PDF document text
  • http://starsearchtool.com/asteromella?confections=naves&tgvrdhlyysbtagtvbgxvcmugocbmdxrqzxqgrsbnynjlbwplcybldxb0aw1pcmfytgv=harshness&herpetic=zg93bmxvywr8djzxtvdvm01xtjhmreuytmpjmk9eqxppvei4zkrjmu9uqjhmq2hos1ncwgizsmtjsepsyznnz1cxae5urkpruxlcv01pqlfsrvpk&initiators=In PDF document text
  • http://www.tcpdf.orgIn PDF document text
  • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
  • http://purl.org/dc/elements/1.1/In PDF document text
  • http://ns.adobe.com/xap/1.0/In PDF document text
  • http://ns.adobe.com/pdf/1.3/In PDF document text
  • http://ns.adobe.com/xap/1.0/mm/In PDF document text
  • http://www.aiim.org/pdfa/ns/extension/In PDF document text
  • http://www.aiim.org/pdfa/ns/schema#In PDF document text
  • http://www.aiim.org/pdfa/ns/property#In PDF document text
  • http://www.aiim.org/pdfa/ns/id/In PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.