Malicious PDF — malware analysis report

Heuristics 5

• Cracked-software lure uses shortlink/download gateway critical PDF_CRACKED_SOFTWARE_SHORTLINK_LURE
  PDF visible text advertises a crack, serial number, archive, or pirated-software download and pairs it with a shortlink or encoded download gateway. This is a high-confidence social-engineering carrier for unwanted software or droppers; the PDF itself is not a parser exploit.
• Cracked-software lure uses download-gateway redirectors high PDF_CRACKED_SOFTWARE_REDIRECTOR_LINK_FARM
  PDF contains multiple cracked-software/keygen/serial-key lure links together with long encoded download-gateway URLs or known crack-download redirector hosts. This is stronger than generic piracy vocabulary: the document is an SEO lure that funnels users through redirect/download infrastructure commonly used for adware, unwanted software, or droppers.
• PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LURE
  PDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
• External URI info PDF_URI
  PDF contains an external URL action
• Embedded URL info EMBEDDED_URL
  One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
  URL http://thedirsite.com/ambras/quibbles.iowans?britesmile=relocate&c2ljaGVyIGIyLjEgbGVocmVyaGFuZGJ1Y2ggcGRmIDk1c2l=/ZG93bmxvYWR8YVo4TjI1cE5YeDhNVFkxT0RBd05qWTVPWHg4TWpVNU1IeDhLRTBwSUZkdmNtUndjbVZ6Y3lCYldFMU1VbEJESUZZeUlGQkVSbDA PDF link annotation

  • http://touchdownhotels.com/wp-content/uploads/2022/07/Mount_And_Blade_Warband_Sex_Modtrmdsf.pdfIn PDF document text
  • https://footpathschool.org/2022/07/17/umax-usc-5800-scanner-driver-for-windows-7-64-bit-patched/In PDF document text
  • https://silkfromvietnam.com/last-xp-v23-iso-top-download-torrent/In PDF document text
  • https://ajkersebok.com/lexicon-pcm-native-total-bundle-crack-_verified_/In PDF document text
  • https://llrmp.com/wp-content/uploads/2022/07/Toonshader2tahl.pdfIn PDF document text
  • http://www.makeenglishworkforyou.com/2022/07/17/ran-kevita-2-sinhala-full-movie-download-upd/In PDF document text
  • https://ideaboz.com/2022/07/17/free-patched-of-shree-lipi-software/In PDF document text
  • https://www.caribbeanskillsbank.com/x-force-keygen-maya-2016-free-exclusive-download-dmg/In PDF document text
  • https://www.neteduproject.org/wp-content/uploads/aleegly.pdfIn PDF document text
  • https://www.hotels-valdys.fr/shopping-and-product-reviews/that-s-cunning-shijo-saidai-no-sakusenIn PDF document text
  • https://www.bourbee.com/wp-content/uploads/2022/07/softube_tube_tech_cl_1b_cracked.pdfIn PDF document text
  • https://solaceforwomen.com/the-legend-of-heroes-trails-of-cold-steel-ii-dlc-unlocker-codex-no-survey-no-password-2019/In PDF document text
  • https://magic-lamps.com/2022/07/17/tronevolutionunlockcodeandserial-fix/In PDF document text
  • http://enricmcatala.com/?p=28640In PDF document text
  • http://postbaku.info/?p=23720In PDF document text
  • https://ardancestudios.com/wp-content/uploads/2022/07/Piping_System_FluidFlow_v_3091_ENG_full_version.pdfIn PDF document text
  • https://romans12-2.org/non-destructive-testing-techniques-by-ravi-prakash-pdf-download-new/In PDF document text
  • http://assicurazioni-finanza.com/?p=5296In PDF document text
  • https://thadadev.com/dfx11serialnumberdownload-repack/In PDF document text
  • https://xtc-hair.com/hd-online-player-tezaab-the-acid-of-love-hindi-movie-updated/In PDF document text
  • http://touchdownhotels.com/wp-In PDF document text
  • https://footpathschool.org/2022/07/17/umax-usc-5800-scanner-driver-for-In PDF document text
  • http://www.makeenglishworkforyou.com/2022/07/17/ran-kevita-2-sinhala-full-In PDF document text
  • https://www.caribbeanskillsbank.com/x-force-keygen-maya-2016-free-In PDF document text
  • https://www.hotels-valdys.fr/shopping-and-product-reviews/that-s-cunning-In PDF document text
  • https://www.bourbee.com/wp-In PDF document text
  • https://solaceforwomen.com/the-legend-of-heroes-trails-of-cold-steel-ii-dlc-In PDF document text
  • https://ardancestudios.com/wp-content/uploads/2022/07/Piping_System_FluidFIn PDF document text
  • https://romans12-2.org/non-destructive-testing-techniques-by-ravi-prakash-In PDF document text
  • https://xtc-hair.com/hd-online-player-tezaab-the-acid-of-love-hindi-movie-In PDF document text
  • http://thedirsite.com/ambras/quibbles.iowans?britesmile=relocate&c2ljagvyigiyljegbgvocmvyagfuzgj1y2ggcgrmidk1c2l=/zg93bmxvywr8yvo4tji1ce5yedhnvfkxt0rbd05qwtvpwhg4twpvnu1iedhlrtbwsuzkdmntundjbvz6y3lcyldfmu1vbejesuzzeulgqkvsbdaIn PDF document text
  • http://www.tcpdf.orgIn PDF document text
  • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
  • http://purl.org/dc/elements/1.1/In PDF document text
  • http://ns.adobe.com/xap/1.0/In PDF document text
  • http://ns.adobe.com/pdf/1.3/In PDF document text
  • http://ns.adobe.com/xap/1.0/mm/In PDF document text
  • http://www.aiim.org/pdfa/ns/extension/In PDF document text
  • http://www.aiim.org/pdfa/ns/schema#In PDF document text
  • http://www.aiim.org/pdfa/ns/property#In PDF document text
  • http://www.aiim.org/pdfa/ns/id/In PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.