MALICIOUS
94
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
The file is identified as malicious by ML classifiers and ClamAV, with a critical detection score. It contains an embedded URI pointing to 'crewmak.ru', which is likely a phishing or malware distribution site. The document body, though heavily obfuscated, suggests a lure related to 'The Count of Monte Cristo' to entice users to click the malicious link.
Machine Learning
- Nyx PDF Classifier malicious score 0.7509
Heuristics 3
-
ClamAV: Pdf.Phishing.Trojan-d2528dad23a95d95-d2528dad23a95d95-10044376-0 critical CLAMAV_DETECTIONClamAV detected this file as malware: Pdf.Phishing.Trojan-d2528dad23a95d95-d2528dad23a95d95-10044376-0
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL https://crewmak.ru/pbw?utm_term=the+count+of+monte+cristo+short+summary PDF link annotation
- https://cdn-cms.f-static.net/uploads/4464877/normal_60b7a7915b3a7.pdfIn PDF document text
- https://cdn-cms.f-static.net/uploads/4375206/normal_5fd1711275460.pdfIn PDF document text
- https://cdn-cms.f-static.net/uploads/4502336/normal_5fd2c02c3a061.pdfIn PDF document text
- https://cdn-cms.f-static.net/uploads/4394060/normal_601aa7cda37a8.pdfIn PDF document text
- https://cdn-cms.f-static.net/uploads/4453721/normal_6037d4e7b6134.pdfIn PDF document text
- https://cdn-cms.f-static.net/uploads/4392451/normal_6029b21cedeb6.pdfIn PDF document text
- https://cdn-cms.f-static.net/uploads/4417645/normal_604942cc556d7.pdfIn PDF document text
- https://padipemoton.weebly.com/uploads/1/3/0/7/130739419/dff5589bad9.pdfIn PDF document text
- https://cdn-cms.f-static.net/uploads/4487419/normal_601816dc5b640.pdfIn PDF document text
- https://jazelufum.weebly.com/uploads/1/3/5/9/135965355/voteja.pdfIn PDF document text
- https://uploads.strikinglycdn.com/files/805764cd-8f72-4e15-988b-6a539b75f708/two_masses_connected_by_a_spring_lagrangian.pdfIn PDF document text
- https://uploads.strikinglycdn.com/files/e55b3fa8-068c-4aa6-8bdf-0bf05dddb0b7/82526680223.pdfIn PDF document text
- https://uploads.strikinglycdn.com/files/48a1d9ef-1afa-4898-941e-9ca5b5b72cd8/matematicas_para_la_administracion_y_economia_ernest_haeussler_edicion_12.pdfIn PDF document text
- https://uploads.strikinglycdn.com/files/4ebb6e65-f8e5-49c6-96df-00fb87896108/castle_falkenstein_tx.pdfIn PDF document text
- https://uploads.strikinglycdn.com/files/8eb4c751-3a6b-463a-93de-feeb62832158/how_to_manage_multiple_hobbies.pdfIn PDF document text
- https://uploads.strikinglycdn.com/files/bb19d308-1b85-4be8-9a4d-adb892326597/bachs_fight_for_freedom_questions_and_answers.pdfIn PDF document text
- https://uploads.strikinglycdn.com/files/85848831-3312-4baa-bf2d-0be619d2f7bc/car_parking_hack_apk_4.7_8.pdfIn PDF document text
- https://uploads.strikinglycdn.com/files/d17d7387-b735-463a-93d9-b23778689d42/best_cover_letter_for_job_application_samples.pdfIn PDF document text
- https://uploads.strikinglycdn.com/files/68efaea0-7318-423f-a05d-1d23d579ad2d/69540513996.pdfIn PDF document text
- https://uploads.strikinglycdn.com/files/03f5998e-9b9a-44f9-b17d-b0daa22d0f46/nojopowaxomulozogode.pdfIn PDF document text
- https://uploads.strikinglycdn.com/files/f6d867c4-5e43-4262-919e-9092d4a3edaa/wotit.pdfIn PDF document text
- https://uploads.strikinglycdn.com/files/83ef6436-e4b6-403d-8210-59f7ab50e809/elgato_hd60_vs_hd60s.pdfIn PDF document text
- https://uploads.strikinglycdn.com/files/0c3eb27d-ddc7-45e6-951d-a35d528618f0/do_breathing_techniques_work.pdfIn PDF document text
Open this report in the interactive analyzer, or submit your own file for analysis.