PDF static analysis report

Static analysis result for SHA-256 43b6e0cae78d2d6d…

SUSPICIOUS

PDF

134.3 KB Created: 2022-07-05 03:09:37 +00:00 Authoring application: garrbeth (via PDF Master 1.0.1) First seen: 2022-07-15
MD5: cba939723b2cb23c69291865b50ed0c0 SHA-1: aec5b6d7dad3a20b95d586e6e915f7301338c16c SHA-256: 43b6e0cae78d2d6d507a4af1a2dc969fd7061093152c381a1787e8d40518bc4b
54 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF document contains multiple links to websites advertising cracked software, such as Adobe Photoshop. These links are designed to lure users into downloading potentially malicious software or visiting compromised sites. The presence of direct IP address links and obfuscated URLs further suggests malicious intent.

Machine Learning

  • Nyx PDF Classifier clean score 0.0042

Heuristics 4

  • Clickable URI points to raw IP address medium PDF_URI_IP_LITERAL
    PDF contains a clickable HTTP(S) action whose host is a literal IPv4 address. Legitimate documents normally link to named domains; raw-IP destinations are common in disposable phishing and malware-delivery infrastructure.
  • PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LURE
    PDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://bestsmartfind.com/ZG93bmxvYWR8TE00TkRKdlpIeDhNVFkxTmprNE1UVXdOSHg4TWpVM05IeDhLRTBwSUhKbFlXUXRZbXh2WnlCYlJtRnpkQ0JIUlU1ZA/communist.electrolysis.courtney.xpop.ingall.insurrectionary..UGhvdG9zaG9wIDIwMjEgKFZlcnNpb24gMjIuMy4xKQUGh PDF link annotation
    • https://entrelink.hk/event/adobe-photoshop-2022-free-download-april-2022/In PDF document text
    • https://gazetabilgoraj.pl/advert/adobe-photoshop-cs6-crack-file-only-activation-free/In PDF document text
    • https://ready2reading.com/wp-content/uploads/2022/07/idabjae.pdfIn PDF document text
    • https://paillacotv.cl/advert/adobe-photoshop-2022-version-23-4-1-keygen-for-lifetime-updated-2022/In PDF document text
    • http://shop.chatredanesh.ir/?p=52657In PDF document text
    • http://3.16.76.74/advert/photoshop-2022-key-generator-3264bit/PDF link annotation
    • https://newsbaki.com/wp-content/uploads/2022/07/elllata.pdfIn PDF document text
    • https://www.loolooherbal.in/wp-content/uploads/2022/07/Photoshop_2021_Version_2210_keygen_generator__Patch_With_Serial_Key_MacWin.pdfIn PDF document text
    • https://www.privalite.com/en/system/files/webform/devearm501.pdfIn PDF document text
    • https://seo-focus.com/adobe-photoshop-2021-version-22-3-license-code-keygen-latest/In PDF document text
    • https://togetherwearegrand.com/adobe-photoshop-2022-version-23-2-free-latest/In PDF document text
    • https://uk-ok.com/2022/07/05/adobe-photoshop-cc-2015-version-17-full-license-serial-number-full-torrent/In PDF document text
    • https://facepager.com/upload/files/2022/07/tUJjEWjJakgLVEFMjnWK_05_fa398acef78cb4dced491b533eced443_file.pdfIn PDF document text
    • http://johnsonproductionstudios.com/?p=18867In PDF document text
    • https://www.arunachalreflector.com/2022/07/05/photoshop-cc-2018-version-19-crack-file-only-with-registration-code-free-download/In PDF document text
    • https://newsafrica.world/2022/07/adobe-photoshop-hack-serial-number-full-torrent-free-download-x64/In PDF document text
    • https://elsm.ch/advert/adobe-photoshop-2020-version-21-install-crack-keygen-for-lifetime-2022-latest/In PDF document text
    • https://expressionpersonelle.com/adobe-photoshop-cc-2/In PDF document text
    • https://creditkardio.com/wp-content/uploads/2022/07/salacou.pdfIn PDF document text
    • https://vizitagr.com/photoshop-2021-version-22-5-nulled-free/In PDF document text
    • http://yogaapaia.it/wp-content/uploads/2022/07/Adobe_Photoshop_CS4.pdfIn PDF document text
    • https://www.spanko.net/upload/files/2022/07/ksGXb4f6zQ5gx6aBhX3B_05_6fa885abb895bde2304288c1411f7f05_file.pdfIn PDF document text
    • https://www.plori-sifnos.gr/wp-content/uploads/2022/07/Photoshop_CC_2015_version_17.pdfIn PDF document text
    • https://explorerea.com/?p=11476In PDF document text
    • https://slab-bit.com/photoshop-2022-version-23-2-keygen-crack-setup-download-win-mac/In PDF document text
    • https://hinkalidvor.ru/photoshop-2022-version-23-4-1-key-generator-for-pc/In PDF document text
    • https://serkit.ru/wp-content/uploads/2022/07/Adobe_Photoshop_2022_version_23_With_Keygen_Download_PCWindows.pdfIn PDF document text
    • https://gazetabilgoraj.pl/advert/adobe-photoshop-cs6-crack-file-only-activation-In PDF document text
    • https://paillacotv.cl/advert/adobe-photoshop-2022-version-23-4-1-keygen-for-In PDF document text
    • https://www.loolooherbal.in/wp-content/uploads/2022/07/Photoshop_2021_VersIn PDF document text
    • https://seo-focus.com/adobe-photoshop-2021-version-22-3-license-code-In PDF document text
    • https://togetherwearegrand.com/adobe-photoshop-2022-version-23-2-free-In PDF document text
    • https://uk-ok.com/2022/07/05/adobe-photoshop-cc-2015-version-17-full-license-In PDF document text
    • https://facepager.com/upload/files/2022/07/tUJjEWjJakgLVEFMjnWK_05_fa398acIn PDF document text
    • https://www.arunachalreflector.com/2022/07/05/photoshop-In PDF document text
    • https://newsafrica.world/2022/07/adobe-photoshop-hack-serial-number-full-In PDF document text
    • https://elsm.ch/advert/adobe-photoshop-2020-version-21-install-crack-keygen-In PDF document text
    • https://www.spanko.net/upload/files/2022/07/ksGXb4f6zQ5gx6aBhX3B_05_6fa8In PDF document text
    • https://www.plori-sifnos.gr/wp-In PDF document text
    • https://slab-bit.com/photoshop-2022-version-23-2-keygen-crack-setup-In PDF document text
    • https://serkit.ru/wp-content/uploads/2022/07/Adobe_Photoshop_2022_version_In PDF document text
    • https://wakelet.com/wake/7xlQNPnBr-uo91Cqso9R9In PDF document text
    • http://sandterho.yolasite.com/resources/Photoshop-2020-Product-Key.pdfIn PDF document text
    • http://distrehert.yolasite.com/resources/Photoshop-CS6-Activation--Activator-X64-Latest-2022.pdfIn PDF document text
    • http://www.tcpdf.orgIn PDF document text
    • http://distrehert.yolasite.com/resources/Photoshop-CS6-Activation--Activator-In PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    +6 more URL(s)