MALICIOUS
90
Risk Score
Malware Insights
MITRE ATT&CK
T1566.002 Spearphishing Attachment
T1204.002 Malicious Link
The PDF contains a large number of embedded URLs pointing to external PDF files hosted on a suspicious subdomain. This pattern is indicative of a link farm, likely used for SEO manipulation or to distribute further malicious content. The ML classifier also flagged this PDF as malicious with high confidence.
Machine Learning
- Nyx PDF Classifier malicious score 0.9912
Heuristics 2
-
Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARMSmall PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://lwoscmobook.myhome.cx/652425247524752485248/Schneider-on-Schneider-The-Conversion-of-the-Jews-and-Other-Anthropological-Stories-by-David-Murray-Schneider.pdf
- http://lwoscmobook.myhome.cx/252445241524952475246/The-Witch-Who-Cried-Wolf-Cry-Wolf-1-by-Sarah-M-kel-.pdf
- http://lwoscmobook.myhome.cx/152495246524152405240/Under-Witch-Aura-Moon-Shadows-2-by-Maria-E-Schneider.pdf
- http://lwoscmobook.myhome.cx/652415241524352485246/Winter-Wolf-Witch-amp-Wolf-1-by-R-J-Blain.pdf
- http://lwoscmobook.myhome.cx/152435243524652485249/The-Witch-the-Wolf-and-the-Vampire-The-Witch-The-Wolf-and-The-Vampire-1-by-A-K-Michaels.pdf
- http://lwoscmobook.myhome.cx/152485243524852475249/Under-Witch-Moon-Moon-Shadows-1-by-Maria-E-Schneider.pdf
- http://lwoscmobook.myhome.cx/652415241524352485244/Inquisitor-Witch-amp-Wolf-2-by-R-J-Blain.pdf
- http://lwoscmobook.myhome.cx/352475245524352445246/The-Spirit-of-a-Witch-The-Briley-Witch-Chronicles-1-by-Sarah-Jane-Avory.pdf
- http://lwoscmobook.myhome.cx/852485243524252415248/Edmund-and-the-White-Witch-The-Chronicles-of-Narnia-The-Lion-the-Witch-and-the-Wardrobe-by-Scout-Driggs.pdf
- http://lwoscmobook.myhome.cx/352475246524852445242/Witch-Is-Why-The-Music-Stopped-A-Witch-P-I-Mystery-19-by-Adele-Abbott.pdf
- http://lwoscmobook.myhome.cx/352475246524852465245/Witch-Is-When-Life-Got-Complicated-A-Witch-P-I-Mystery-2-by-Adele-Abbott.pdf
- http://lwoscmobook.myhome.cx/252495245524052405244/A-Witch-Central-Wedding-A-Modern-Witch-3-5-by-Debora-Geary.pdf
- http://lwoscmobook.myhome.cx/352475246524852455246/Witch-is-When-My-Heart-Broke-A-Witch-P-I-Mystery-9-by-Adele-Abbott.pdf
- http://lwoscmobook.myhome.cx/352475246524852465240/Witch-Is-When-The-Floodgates-Opened-A-Witch-P-I-Mystery-7-by-Adele-Abbott.pdf
- http://lwoscmobook.myhome.cx/352475246524852445249/Witch-Is-Why-The-Laughter-Stopped-A-Witch-P-I-Mystery-14-by-Adele-Abbott.pdf
- http://lwoscmobook.myhome.cx/352475246524852465242/Witch-is-When-The-Bubble-Burst-A-Witch-P-I-Mystery-5-by-Adele-Abbott.pdf
- http://lwoscmobook.myhome.cx/352425247524952455245/Witch-Weed-Witch-Saga-5-by-Phyllis-Reynolds-Naylor.pdf
- http://lwoscmobook.myhome.cx/452475246524452435244/Gone-with-the-Witch-Triplet-Witch-Trilogy-2-by-Annette-Blair.pdf
- http://lwoscmobook.myhome.cx/252485242524352455243/Gone-with-the-Witch-Triplet-Witch-Trilogy-2-by-Annette-Blair.pdf
- http://lwoscmobook.myhome.cx/552455246524952465240/The-Return-of-the-Witch-The-Witch-s-Daughter-2-by-Paula-Brackston.pdf
- http://lwoscmobook.myhome.cx/352475245524352445246/The-Spirit-of-a-Wit
Open this report in the interactive analyzer, or submit your own file for analysis.