Malicious PDF — malware analysis report

Heuristics 3

• Cracked-software lure uses shortlink/download gateway critical PDF_CRACKED_SOFTWARE_SHORTLINK_LURE
  PDF visible text advertises a crack, serial number, archive, or pirated-software download and pairs it with a shortlink or encoded download gateway. This is a high-confidence social-engineering carrier for unwanted software or droppers; the PDF itself is not a parser exploit.
• External URI info PDF_URI
  PDF contains an external URL action
• Embedded URL info EMBEDDED_URL
  One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
  URL http://evacdir.com/V2luUmVzY3VlIDcgdjEuMDguNTEgWzMyLUJpdF0gSW5jbCBTZXJpYWwgKEthcmFuUGMpV2l/hocking/klement/nastier.prius?ZG93bmxvYWR8cWI4WkhaaGRIeDhNVFkxTlRNek9Ua3dOSHg4TWpVNU1IeDhLRTBwSUZkdmNtUndjbVZ6Y3lCYldFMU1VbEJESUZZeUlGQkVSbDA=body.rested/ PDF link annotation

  • https://lombard-magnet.ru/wp-content/uploads/2022/06/shasta.pdfIn PDF document text
  • https://www.bayer-moebel.de/index.php/2022/06/final-drive-fury-crack-fix-download/In PDF document text
  • https://fryter.com/upload/files/2022/06/8iTXTLD92ojZuoFREotP_16_7c6ae36a11e930aab0740bd944af0a46_file.pdfIn PDF document text
  • https://adarsi.org/cursos/blog/index.php?entryid=745In PDF document text
  • https://4c70.com/3d-resistivity-inversion-software-s/In PDF document text
  • https://s4academy.s4ds.com/blog/index.php?entryid=989In PDF document text
  • http://www.amerinegraham.com/?p=6771In PDF document text
  • http://mysleepanddreams.com/embird-2015-registration-password-1626/In PDF document text
  • http://distancelearning-uiz.com/blog/index.php?entryid=1050In PDF document text
  • https://verycheapcars.co.zw/advert/navisworks-simulate-2011-32-bit-x86-english-keygen-hot/In PDF document text
  • https://allindiaherb.com/wp-content/uploads/2022/06/netperfwindowsbinarydownloadsoftware.pdfIn PDF document text
  • https://aghadeergroup.com/2022/06/16/yashoda-song-from-heart-attack-movie-mp3-31/In PDF document text
  • http://travelfamilynetwork.com/?p=14219In PDF document text
  • https://poliestudios.org/campus2022/blog/index.php?entryid=686In PDF document text
  • https://versiis.com/22752/download-she-wolf-the-last-sentinel/In PDF document text
  • https://dd-school.com/wp-content/uploads/2022/06/akilathirattu_ammanai_pdf_in_tamil_download_upd.pdfIn PDF document text
  • http://wp2-wimeta.de/maquinas-electricas-chapman-4-edicion/In PDF document text
  • https://xn--80aagyardii6h.xn--p1ai/stardock-start8-v1-45-repack-by-painter-pre-activated-download-pc-__top__/In PDF document text
  • http://www.pickrecruit.com/wp-content/uploads/2022/06/janger.pdfIn PDF document text
  • http://evacdir.com/v2luumvzy3vlidcgdjeumdguntegwzmylujpdf0gsw5jbcbtzxjpywwgkethcmfuugmpv2l/hocking/klement/nastier.prius?zg93bmxvywr8cwi4wkhaagriedhnvfkxtlrnek9ua3doshg4twpvnu1iedhlrtbwsuzkdmntundjbvz6y3lcyldfmu1vbejesuzzeulgqkvsbda=body.rested/In PDF document text
  • https://opblowleacouncyret.wixsite.com/upamilly/post/lage-raho-gujjubhai-720p-hd-5In PDF document text
  • http://www.tcpdf.orgIn PDF document text
  • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
  • http://purl.org/dc/elements/1.1/In PDF document text
  • http://ns.adobe.com/xap/1.0/In PDF document text
  • http://ns.adobe.com/pdf/1.3/In PDF document text
  • http://ns.adobe.com/xap/1.0/mm/In PDF document text
  • http://www.aiim.org/pdfa/ns/extension/In PDF document text
  • http://www.aiim.org/pdfa/ns/schema#In PDF document text
  • http://www.aiim.org/pdfa/ns/property#In PDF document text
  • http://www.aiim.org/pdfa/ns/id/In PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.