PDF malware analysis — malicious · 3dd3929db7275a60

MALICIOUS

PDF

72.0 KB Created: 2022-12-16 19:06:22 +00:00 Authoring application: giomar (via mPDF 8.1.2) First seen: 2026-06-26

MD5: ad61af359ef7de6a60f835759ed4444e SHA-1: 6c09cfc821c4e6872982af44fa62738d29a3a2b7 SHA-256: 3dd3929db7275a60dea0fbfdb34d95276ac35676952b48cf20f164800ce8a2e1

94 Risk Score

Machine Learning

Nyx PDF Classifier clean score 0.0019

Heuristics 4

Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM

Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LURE

PDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
External URI info PDF_URI

PDF contains an external URL action
Embedded URL info EMBEDDED_URL

One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
URL http://mydrugdir.com/analyzation/jealousies/appmas.desyrel.fearlessly.precambrian/ZG93bmxvYWR8eEExWjJWbGZId3hOamN4TWpFME9UazRmSHd5TlRrd2ZId29UU2tnVjI5eVpIQnlaWE56SUZ0WVRVeFNVRU1nVmpJZ1VFUkdYUQ.QXV0b0NBRAQXV PDF link annotation
- https://arabistgroup.com/wp-content/uploads/2022/12/AutoCAD-Descargar-Cdigo-de-activacin-3264bit-2023.pdfIn PDF document text
- http://www.caribbeanequipmenttraders.com/wp-content/uploads/2022/12/AutoCAD-Descarga-gratis-Cdigo-de-activacin-con-Keygen-PCWindows-actualIzaR-2023.pdfIn PDF document text
- http://www.vecchiosaggio.it/wp-content/uploads/2022/12/latrbren.pdfIn PDF document text
- https://projfutr.org/wp-content/uploads/2022/12/AutoCAD-Cdigo-de-activacin-Windows-3264bit-versin-final-2022.pdfIn PDF document text
- https://thetraditionaltoyboxcompany.com/wp-content/uploads/2022/12/wikaldo.pdfIn PDF document text
- https://osteocertus.com/wp-content/uploads/2022/12/xireff.pdfIn PDF document text
- https://madeinamericabest.com/wp-content/uploads/2022/12/cebbird.pdfIn PDF document text
- https://berlin-property-partner.com/wp-content/uploads/2022/12/AutoCAD-Cdigo-de-licencia-y-Keygen-caLiEnte-2022-En-Espaol.pdfIn PDF document text
- https://infinitynmore.com/2022/12/16/autocad-2021-24-0-con-clave-de-producto-version-completa-x64-2023/In PDF document text
- https://splex.com/wp-content/uploads/2022/12/faytag.pdfIn PDF document text
- https://yildizbursa.org/wp-content/uploads/2022/12/Descargar_AutoCAD__Clave_de_licencia_llena_Cdigo_de_activacin_con_Keygen_2022.pdfIn PDF document text
- https://swisshtechnologies.com/wp-content/uploads/2022/12/AutoCAD-Descargar-Vida-til-Cdigo-de-activacin-2023-En-Espaol.pdfIn PDF document text
- https://www.glasspro.pl/2022/12/16/descarga-gratis-autocad-23-1-clave-de-producto-win-mac-64-bits-mas-reciente-2023/In PDF document text
- https://energyconnectt.com/wp-content/uploads/2022/12/reysant.pdfIn PDF document text
- https://dailyconsumerlife.com/wp-content/uploads/2022/12/Descarga-gratis-AutoCAD-Activador-3264bit-2023-En-Espaol.pdfIn PDF document text
- https://arlingtonliquorpackagestore.com/wp-content/uploads/2022/12/bernhelo.pdfIn PDF document text
- https://kellerwilliamsortigas.com/2022/12/17/descarga-gratis-autocad-2023-24-2-torrent-codigo-de-activacion-clave-de-producto-completa-for-windows-x64-2023-en-espanol/In PDF document text
- https://customaffiliations.com/wp-content/uploads/2022/12/glynranf.pdfIn PDF document text
- https://arabistgroup.com/wp-content/uploads/2022/12/AutoCAD-Descargar-Cdigo-de-activacin-3264bIn PDF document text
- http://www.caribbeanequipmenttraders.com/wp-content/uploads/2022/12/AutoCAD-Descarga-gratis-In PDF document text
- https://projfutr.org/wp-content/uploads/2022/12/AutoCAD-Cdigo-de-activacin-Windows-3264bit-versiIn PDF document text
- https://berlin-property-partner.com/wp-content/uploads/2022/12/AutoCAD-Cdigo-de-licencia-y-KeygeIn PDF document text
- https://infinitynmore.com/2022/12/16/autocad-2021-24-0-con-clave-de-producto-version-completa-x6In PDF document text
- https://yildizbursa.org/wp-content/uploads/2022/12/Descargar_AutoCAD__Clave_de_licencia_llena_CIn PDF document text
- https://swisshtechnologies.com/wp-content/uploads/2022/12/AutoCAD-Descargar-Vida-til-Cdigo-de-aIn PDF document text
- https://www.glasspro.pl/2022/12/16/descarga-gratis-autocad-23-1-clave-de-producto-win-mac-64-bitsIn PDF document text
- https://dailyconsumerlife.com/wp-content/uploads/2022/12/Descarga-gratis-AutoCAD-Activador-3264In PDF document text
- https://kellerwilliamsortigas.com/2022/12/17/descarga-gratis-autocad-2023-24-2-torrent-codigo-de-aIn PDF document text
- http://www.caribbeanequipmenttraders.com/wp-content/uploads/2022/12/autocad-descarga-gratis-cdigo-de-activacin-con-keygen-pcwindows-actualizar-2023.pdfIn PDF document text
- https://techplanet.today/post/autodesk-autocad-descarga-gratis-activador-con-codigo-de-licencia-windows-10-11-2022In PDF document text
- https://7hjbe5.a2cdn1.secureserver.net/wp-content/uploads/2022/12/Descargar-AutoCAD-Clave-de-producto-For-PC-X64-lanzamiento-de-por-vidA-2022-En-Espaol.pdf?time=1671216961In PDF document text
- https://fiverryourparty.wpcomstaging.com/wp-content/uploads/2022/12/AutoCAD-Descarga-gratis-Torrente-ltimo-laNzamieNto-2022.pdfIn PDF document text
- https://techplanet.today/post/autodesk-autocad-descarga-gratis-activador-con-codigo-de-licencia-winIn PDF document text
- https://7hjbe5.a2cdn1.secureserver.net/wp-content/uploads/2022/12/Descargar-AutoCAD-Clave-de-prIn PDF document text
- https://fiverryourparty.wpcomstaging.com/wp-content/uploads/2022/12/AutoCAD-Descarga-gratis-ToIn PDF document text
- http://dejavu.sourceforge.netIn PDF document text
- http://dejavu.sourceforge.net/wiki/index.php/LicenseIn PDF document text

Extracted artifacts 3

Files carved from inside the sample during analysis.

Filename	Kind	Source	Size
`stream_009_off00007467.bin`	decompressed-pdf-stream	PDF FlateDecoded stream at offset 0x7467	20560 bytes
SHA-256: `9cc323e7204f13474240b06f98384be51c124924c3bfde565a9ecab1aca22899`
`stream_013_off0000dc05.bin`	decompressed-pdf-stream	PDF FlateDecoded stream at offset 0xDC05	119072 bytes
SHA-256: `df221e87b81d1531cafdadb6c09a602e9f604d1baf0a17bbd350cbb83baa06f7`
`font_01_sfnt_off0000ab7f.bin`	pdf-font-stream	PDF embedded font (sfnt) at offset 0xAB7F	20424 bytes
SHA-256: `1c0ac65d761e89a3a3d0824a67a8db7b66f521475b182a215d9d1b22f8cac1af`

Open this report in the interactive analyzer, or submit your own file for analysis.