MALICIOUS
120
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
T1204.002 Malicious Link
The PDF contains a large number of embedded links to external PDF files, a technique often used for SEO spam or to distribute further malicious content. The ClamAV detection as Pdf.Dropper.Agent-7604370-0 further supports its malicious nature. The embedded URLs are the primary IOCs, pointing to a large link farm hosted on xiixmcuin.linkpc.net.
Heuristics 3
-
Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARMSmall PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
-
ClamAV: Pdf.Dropper.Agent-7604370-0 critical CLAMAV_DETECTIONClamAV detected this file as malware: Pdf.Dropper.Agent-7604370-0
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://xiixmcuin.linkpc.net/3205209200207208/Deadly-Double-Florida-Mystery-Double-Feature-2-by-Diane-Capri.pdf
- http://xiixmcuin.linkpc.net/4205201209204203/A-Night-at-the-Operation-Double-Feature-Mystery-3-by-Jeffrey-Cohen.pdf
- http://xiixmcuin.linkpc.net/3208200202203203/Double-Feature-Timber-Ridge-Riders-9-by-Maggie-Dana.pdf
- http://xiixmcuin.linkpc.net/3209208200201202/Cobalt-City-Christmas-by-Nathan-Crowder.pdf
- http://xiixmcuin.linkpc.net/3205209203206200/Florida-Is-Murder-Due-Justice-and-Surface-Tension-Mystery-Double-Feature-by-Diane-Capri.pdf
- http://xiixmcuin.linkpc.net/2207203204205208/Cobalt-City-Dark-Carnival-by-Nathan-Crowder.pdf
- http://xiixmcuin.linkpc.net/3207204206203209/Ghostwalker-Forgotten-Realms-The-Fighters-2-by-Erik-Scott-de-Bie.pdf
- http://xiixmcuin.linkpc.net/1206209209205203/Baby-Girl-Erik-Ead-Trilogy-1-by-Scott-Hildreth.pdf
- http://xiixmcuin.linkpc.net/1209200206201/Double-Feature-Attack-of-the-Soul-Sucking-Brain-Zombies-Bride-of-the-Soul-Sucking-Brain-Zombies-Russel-Middlebrook-3-by-Brent-Hartinger.pdf
- http://xiixmcuin.linkpc.net/6201205205202201/Baby-Girl-Loved-Erik-Ead-Trilogy-3-by-Scott-Hildreth.pdf
- http://xiixmcuin.linkpc.net/1200203209209206208/Double-Double-How-to-Double-Your-Revenue-amp-Profit-in-3-Years-or-Less-by-Cameron-Herold.pdf
- http://xiixmcuin.linkpc.net/7204209204202201/Bitch-Planet-Triple-Feature-Vol-1-Bitch-Planet-Triple-Feature-1-by-Kelly-Sue-DeConnick.pdf
- http://xiixmcuin.linkpc.net/2202203207207202/Beneath-Ceaseless-Skies-Issue-195-Special-Double-Issue-for-BCS-Science-Fantasy-Month-3-by-Scott-H-Andrews.pdf
- http://xiixmcuin.linkpc.net/4208205206206202/Immortal-City-Immortal-City-1-by-Scott-Speer.pdf
- http://xiixmcuin.linkpc.net/2201205205207206/Cobalt-Blue-by-Peggy-Payne.pdf
- http://xiixmcuin.linkpc.net/9206207206202207/Angel-City-Love-by-Scott-Speer.pdf
- http://xiixmcuin.linkpc.net/1209201206209209/Batman-Vol-2-The-City-of-Owls-by-Scott-Snyder.pdf
- http://xiixmcuin.linkpc.net/9206204207201208/Butch-Fatale-Dyke-Dick---Double-D-Double-Cross-by-Christa-Faust.pdf
- http://xiixmcuin.linkpc.net/6203205204207201/Discours-de-r-ception-de-rik-Orsenna-l-Acad-mie-fran-aise-et-r-ponse-de-M-Bertrand-Poirot-Delpech-by-rik-Orsenna.pdf
- http://xiixmcuin.linkpc.net/4205205204201201/Cobalt-Valentine-amp-Lovelace-Mystery-2-by-Nathan-Aldyne.pdf
- http://xiixmcuin.linkpc.net/1209200206201/Double-Feature-Attack-of-the-Soul-Sucking-Brain-Zombies-Bride-of-the-Soul-Sucking-Brain-Zombies-Russel-Middlebrook-3-by-Brent-
Open this report in the interactive analyzer, or submit your own file for analysis.