Malicious PDF — malware analysis report

Heuristics 4

• Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
  Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
• PDF links to a cracked-software download doorway (base64-obfuscated) high PDF_CRACKED_SOFTWARE_DOWNLOAD_DOORWAY
  PDF's embedded link hides a pirated-software title as a base64 blob inside the URL path/query (and/or carries the ``download|`` doorway-template marker), rather than in visible text. This is a TCPDF-generated SEO doorway that ranks for software-piracy searches and funnels users to fake 'crack/keygen' download pages distributing adware, potentially-unwanted programs, or droppers. The base64 encoding is deliberate obfuscation to evade plaintext lure rules; the PDF itself carries no parser exploit — the risk is the linked crack-download destination.
• External URI info PDF_URI
  PDF contains an external URL action
• Embedded URL info EMBEDDED_URL
  One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
  URL http://bestsmartfind.com/synthesizer/anasarca?comparing=pericarditis/ZG93bmxvYWR8Qkk1TVRseWJueDhNVFkzTVRFeU1EVXhNSHg4TWpVNU1IeDhLRTBwSUZkdmNtUndjbVZ6Y3lCYldFMU1VbEJESUZZeUlGQkVSbDA.constructive=QXV0b0NBRAQXV=disliked PDF link annotation

  • http://www.360sport.it/advert/descargar-software-autocad-2010-link/In PDF document text
  • https://miraclestripbass.com/wp/advert/autocad-19-1-cortar-a-tajos-3264bit-2023-en-espanol/In PDF document text
  • https://aapanobadi.com/wp-content/uploads/2022/12/Descargar-AutoCAD-Cdigo-de-registro-x3264-2022.pdfIn PDF document text
  • http://earthoceanandairtravel.com/wp-content/uploads/2022/12/Descarga_gratis_AutoCAD_231_Activador_Windows_2022.pdfIn PDF document text
  • https://teenmemorywall.com/wp-content/uploads/2022/12/Descargar_E_Instalar_Autocad_2015_Full_Espaol_64_Bits_Gratis.pdfIn PDF document text
  • http://ooouptp.ru/wp-content/uploads/2022/12/lavisob.pdfIn PDF document text
  • https://thecryptobee.com/wp-content/uploads/2022/12/amymalv.pdfIn PDF document text
  • http://belcomcorp.com/wp-content/uploads/2022/12/AutoCAD-Versin-completa-64-Bits-2023-Espaol.pdfIn PDF document text
  • http://jwbotanicals.com/autocad-2017-descargar-e-instalar-gratis-y-legal-upd-2/In PDF document text
  • https://www.corsisj2000.it/wp-content/uploads/2022/12/Descargar-Autocad-2007-Gratis-En-Ingles-Para-Windows-7-NEW.pdfIn PDF document text
  • https://aapanobadi.com/wp-content/uploads/2022/12/Descargar-AutoCAD-Cdigo-de-registro-x3264-2In PDF document text
  • http://earthoceanandairtravel.com/wp-content/uploads/2022/12/Descarga_gratis_AutoCAD_231_ActivIn PDF document text
  • https://teenmemorywall.com/wp-content/uploads/2022/12/Descargar_E_Instalar_Autocad_2015_Full_In PDF document text
  • http://belcomcorp.com/wp-content/uploads/2022/12/AutoCAD-Versin-completa-64-Bits-2023-Espaol.pIn PDF document text
  • https://www.corsisj2000.it/wp-content/uploads/2022/12/Descargar-Autocad-2007-Gratis-En-Ingles-PaIn PDF document text
  • https://techplanet.today/post/descargar-autocad-gratis-autodeskIn PDF document text
  • https://techplanet.today/post/descarga-gratis-autocad-191-torrent-completo-del-numero-de-serie-clave-de-producto-winmac-3264bit-2023In PDF document text
  • https://techplanet.today/post/descarga-gratis-autocad-191-torrent-completo-del-numero-de-serie-clavIn PDF document text
  • http://dejavu.sourceforge.netIn extracted file (stream_009_off0000678e.bin)
  • http://dejavu.sourceforge.net/wiki/index.php/LicenseIn extracted file (stream_009_off0000678e.bin)

Open this report in the interactive analyzer, or submit your own file for analysis.