Malicious PDF — malware analysis report

Heuristics 5

• Fake 'free download' SEO-poisoning PDF critical PDF_SEO_FAKE_DOWNLOAD
  The ML classifier flagged this PDF AND it carries a visual download/call-to-action lure AND an off-domain server-side download-gateway link whose query string names a document payload. This three-signal conjunction is the fake-document / 'free PDF download' SEO-poisoning delivery pattern: the page is padded with benign decoy links to dilute classifier scores while funnelling the victim through the gateway to malware/scareware. Acting only on the conjunction keeps benign download-bearing PDFs from being misflagged.
• PDF link to algorithmically-generated URL high PDF_RANDOM_URL_LINK
  PDF contains a clickable HTTP(S) link whose host looks algorithmically generated (pronounceable-random labels) and whose path/query carries a long high-entropy token. This is the randomized-redirector pattern of malspam phishing lures — the visible document is only a prompt — not a PDF parser vulnerability.
• Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTON
  Document contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
• External URI info PDF_URI
  PDF contains an external URL action
• Embedded URL info EMBEDDED_URL
  One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
  URL http://uncpbisdegree.com/download3.php?q=student-solutions-manual-advanced-engineering-mathematics.pdf PDF link annotation

  • http://uncpbisdegree.com/download4.php?q=student-solutions-manual-advanced-engineering-mathematics.pdfIn PDF document text
  • http://www.slader.com/textbook/9788126554232-advanced-engineering-mathematics-international-student-version-10th-edition/In PDF document text
  • http://www.slader.com/textbook/9781439048542-student-solutions-manual-volume-1-for-serwayjewetts-physics-for-scientists-and-engineers-8th-edition/In PDF document text
  • http://www.testbank.org/solutionsmanual.htmlIn PDF document text
  • https://www.georgiastandards.org/Georgia-Standards/Pages/Math-9-12.aspxIn PDF document text
  • http://advmicrogrid.com/about-us.htmlIn PDF document text
  • http://www.k12.wa.us/STEM/default.aspxIn PDF document text
  • http://www.thecollegesolution.com/getting-real-about-majoring-in-engineering/In PDF document text
  • http://www.nul.ls/index010d.html?option=com_content&view=article&id=118&Itemid=595In PDF document text
  • http://www.cxc.org/subject/building-mechanical-engineering-drawing/In PDF document text
  • http://www.wowebook.org/In PDF document text
  • https://www.fanshawec.ca/programs-and-courses/program/ely7-electrical-engineering-technology/next-yearIn PDF document text
  • http://uncpbisdegree.com/1/shibaura-stiger-sd2243.pdfIn PDF document text
  • http://riverside-resort.net/1/volvo-v70-2000-diagram.pdfIn PDF document text
  • http://uncpbisdegree.com/1/student-exploration-populations-and-samples-answer.pdfIn PDF document text
  • http://riverside-resort.net/1/vocabulary-power-lesson-12-answer-key.pdfIn PDF document text
  • http://riverside-resort.net/1/www-jubileelife.pdfIn PDF document text
  • http://uncpbisdegree.com/1/the-hero-with-a-thousand-faces-joseph-campbell.pdfIn PDF document text
  • http://uncpbisdegree.com/1/sharp-ux-cl220-fax-machines-owners-manual.pdfIn PDF document text
  • http://uncpbisdegree.com/1/software-project-management-objective-questions-answers.pdfIn PDF document text
  • http://uncpbisdegree.com/1/separate-peace-chapter-questions-and-answers.pdfIn PDF document text
  • http://uncpbisdegree.com/1/song-of-war-lion-of-war-series-book-3.pdfIn PDF document text
  • http://www.ascendercorp.com/In PDF document text
  • http://www.ascendercorp.com/typedesigners.htmlIn PDF document text
  • http://www.academia.edu/20215811/Solutions_Manual_to_Advanced_Modern_Engineering_Mathematics_4th_EditionIn PDF document text
  • http://www.jblearning.com/catalog/9781284105902/In PDF document text
  • http://www.jblearning.com/mathematics/engineering/In PDF document text
  • http://www.chegg.com/homework-help/advanced-engineering-mathematics-4th-edition-solutions-9780763779665In PDF document text
  • http://www.webassign.net/features/textbooks/zillengmath6/details.htmlIn PDF document text
  • https://www.wpi.edu/academicsIn PDF document text
  • https://www.jstor.org/subject/mathematicsIn PDF document text
  • http://me.columbia.edu/courses-6In PDF document text
  • http://www.ucsd.edu/catalog/courses/ECE.htmlIn PDF document text
  • http://www.tn.gov/In PDF document text
  • http://catalogue.uci.edu/donaldbrenschoolofinformationandcomputersciences/In PDF document text
  • https://ocw.mit.edu/resources/In PDF document text
  • http://www.cwu.edu/In PDF document text
  • http://go.microsoft.com/fwlink/?LinkId=521839&CLCID=0409In PDF document text
  • http://go.microsoft.com/fwlink/?LinkID=246338&CLCID=0409In PDF document text
  • https://go.microsoft.com/fwlink/?linkid=868922In PDF document text
  • http://go.microsoft.com/fwlink/?LinkID=286759&CLCID=409In PDF document text
  • http://go.microsoft.com/fwlink/?LinkID=617297In PDF document text
  • https://fedoraproject.org/wiki/Licensing/LiberationFontLicenseIn PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.