Malicious PDF — malware analysis report

Heuristics 5

• Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
  Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
• PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LURE
  PDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
• Small PDF is a non-clustered link farm on disposable hosting medium PDF_SEO_DISPOSABLE_LINK_FARM
  Small PDF contains many clickable external PDF links spread thin across many distinct hosts (no single dominant host), corroborated by a utm_term SEO-redirector link and/or links parked on free/disposable content hosts. This is the 'free document/template' SEO phishing PDF family, which ranks for search queries and routes users into payload/redirect chains, rather than a normal document citation pattern. The PDF itself carries no exploit — the risk is the linked destinations.
• External URI info PDF_URI
  PDF contains an external URL action
• Embedded URL info EMBEDDED_URL
  One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
  URL https://bltlly.com/2sExec PDF link annotation

  • https://rixma.se/wp-content/uploads/2023/01/Kamasutra-3D-2-Full-Movie-Hd-With-English-Subtitles-Download.pdfIn PDF document text
  • https://knoxvilledirtdigest.com/wp-content/uploads/2023/01/renflo-1.pdfIn PDF document text
  • https://generalskills.org/%fr%In PDF document text
  • https://oxfordbluebird.com/wp-content/uploads/2023/01/Snap-Art-4-Serial-Number-INSTALL.pdfIn PDF document text
  • http://www.kiwitravellers2017.com/2023/01/15/english-ek-aur-ek-gyarah-movie-download-blu-ray-hindi-movies-exclusive/In PDF document text
  • https://sagarmy.com/download-minions-english-in-tamil-dubbed-torrent/In PDF document text
  • https://inevia.gr/wp-content/uploads/2023/01/heilenn.pdfIn PDF document text
  • https://cambodiaonlinemarket.com/ek-hi-bhool-hd-movie-free-download-in-hindi/In PDF document text
  • http://www.wanslu.com/force-2-full-movie-hd-online-and-download-torrent-link/In PDF document text
  • https://vaveyan.com/download-the-love-is-forever-movie-telugu-download-best/In PDF document text
  • https://j-core.club/2023/01/15/kumakuma-manga-editor-repack-free-download-addons/In PDF document text
  • http://www.freecouponsaving.com/wp-content/uploads/2023/01/valhald.pdfIn PDF document text
  • https://www.digitalgreenwich.com/g-kutta-se-malayalam-movie-2012-download-new/In PDF document text
  • https://uglybear90.com/wp-content/uploads/2023/01/TELECHARGER-LE-TORRENT-AutoCAD-Plant-3D-2012-FRENCH-32-BITS.pdfIn PDF document text
  • http://holger-schleiffer.de/?p=18690In PDF document text
  • http://alluneed.company/?p=29540In PDF document text
  • https://www.solaiocompound.it/wp-content/uploads/2023/01/deenpar.pdfIn PDF document text
  • https://www.residenceyaounde.com/wp-content/uploads/2023/01/Metin2-Steel-EXCLUSIVE-Download-Torent-1.pdfIn PDF document text
  • https://dialinh.com/wohltemperierte-klavier-henle-pdf-download-exclusive/In PDF document text
  • https://rahvita.com/bangbus-nadia-lopez-felicia/In PDF document text
  • https://rixma.se/wp-content/uploads/2023/01/Kamasutra-3D-2-Full-Movie-Hd-With-English-Subtitles-In PDF document text
  • http://www.kiwitravellers2017.com/2023/01/15/english-ek-aur-ek-gyarah-movie-download-blu-ray-hinIn PDF document text
  • https://uglybear90.com/wp-content/uploads/2023/01/TELECHARGER-LE-TORRENT-AutoCAD-Plant-3In PDF document text
  • https://www.residenceyaounde.com/wp-content/uploads/2023/01/Metin2-Steel-EXCLUSIVE-DownloaIn PDF document text
  • http://dejavu.sourceforge.netFontsIn extracted file (font_02_sfnt_off0000978f.bin)
  • http://dejavu.sourceforge.netIn extracted file (stream_003_off00002f33.bin)
  • http://dejavu.sourceforge.net/wiki/index.php/LicenseIn extracted file (stream_003_off00002f33.bin)
  • http://dejavu.sourceforge.net/wiki/index.php/LicenseDejaVuIn extracted file (font_02_sfnt_off0000978f.bin)

Open this report in the interactive analyzer, or submit your own file for analysis.