MALICIOUS
64
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
T1204.002 Malicious Link
The PDF document contains a large number of external links, identified by the PDF_SEO_LINK_FARM heuristic, suggesting a link farm or a distribution point for malicious content. One of the primary URLs, http://find24hs.com/burges.ZG93bmxvYWR8MUd2Tm1KcVozeDhNVFkxTmpnNU1qTTFNbng4TWpVNE4zeDhLRTBwSUVobGNtOXJkU0JiUm1GemRDQkhSVTVk/V2VpZ2h0SHViV2V?responsible=festers&shifuku=wardour, is likely a download URL for a second-stage payload. The document body is heavily obfuscated and does not provide direct clues to the user-facing lure.
Machine Learning
- Nyx PDF Classifier clean score 0.0119
Heuristics 3
-
Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARMSmall PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://find24hs.com/burges.ZG93bmxvYWR8MUd2Tm1KcVozeDhNVFkxTmpnNU1qTTFNbng4TWpVNE4zeDhLRTBwSUVobGNtOXJkU0JiUm1GemRDQkhSVTVk/V2VpZ2h0SHViV2V?responsible=festers&shifuku=wardour
- https://tattooshopreviews.com/wp-content/uploads/2022/07/weriopel.pdf
- https://thelacypost.com/muxman-torrent-activation-code-win-mac-2022/
- https://ulrichs-flachsmeer.de/wp-content/uploads/2022/07/Colorado.pdf
- https://visitforres.scot/easy-xml-converter-crack-activation-code-with-keygen-win-mac/
- https://parleafrique.com/wp-content/uploads/2022/07/jolfly.pdf
- https://lighthousehealing.org/photo-stock-agency-screensaver-crack-license-key-full-download/
- https://www.7desideri.it/date-reminder-crack-free-download-for-windows/
- https://www.cdnapolicity.it/wp-content/uploads/2022/07/berlgia.pdf
- https://richard-wagner-werkstatt.com/wp-content/uploads/2022/07/NodeXL_Class_Libraries__Crack__Free_Download_PCWindows_Latest.pdf
- https://awamagazine.info/advert/drbl-winroll-crack-product-key-for-windows/
- https://poetbook.com/upload/files/2022/07/FOG1IYVy5CchiJ6Q5UwO_04_11e34990cc4a3a42ac8fbd25a4edd9f4_file.pdf
- https://ajkersebok.com/audio-renderer-changer-2010-29-270-357-crack-activation-key-free-download/
- https://nysccommunity.com/advert/bali-calc-crack-free-license-key-pc-windows/
- https://www.easyblogging.in/wp-content/uploads/2022/07/Amazing_Dusk__Crack_Torrent_Download_For_Windows_April2022.pdf
- https://versiis.com/38192/tunatic-crack-free-download-updated-2022/
- https://besttoolguide.com/2022/07/04/messagesave-crack-with-license-code/
- https://www.acvconsultoria.com/wp-content/uploads/2022/07/Asoftis_IP_Changer.pdf
- https://arcmaxarchitect.com/sites/default/files/webform/defragmenter-pro-plus.pdf
- https://voltigieren-bb.de/advert/smoz-start-menu-organizer-crack-free-download-for-windows/
- http://nakatlie.yolasite.com/resources/Panda-5-For-Chrome-Crack---License-Keygen-2022.pdf
- http://www.tcpdf.org
- http://www.w3.org/1999/02/22-rdf-syntax-ns#
- http://purl.org/dc/elements/1.1/
- http://ns.adobe.com/xap/1.0/
- http://ns.adobe.com/pdf/1.3/
- http://ns.adobe.com/xap/1.0/mm/
- http://www.aiim.org/pdfa/ns/extension/
- http://www.aiim.org/pdfa/ns/schema#
- http://www.aiim.org/pdfa/ns/property#
- http://www.aiim.org/pdfa/ns/id/
Open this report in the interactive analyzer, or submit your own file for analysis.