MALICIOUS
94
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
T1204.002 Malicious Link
This PDF document contains embedded links that are presented as repair manuals, but lead to a suspicious domain. The critical heuristic 'SE_VIRAL_VIDEO_CLICKBAIT_LINK' indicates that the PDF is designed to trick users into clicking a link to a malicious host, likely for downloading a second-stage payload. The presence of multiple external URLs and the clickbait nature of the content strongly suggest a phishing or malware distribution attempt.
Machine Learning
- Nyx PDF Classifier suspicious score 0.3597
Heuristics 4
-
Viral-video clickbait PDF links to suspicious host critical SE_VIRAL_VIDEO_CLICKBAIT_LINKDocument uses viral/leaked-video lure text and links to a suspicious disposable-looking web host. This is a clickbait/traffic-scam carrier shape rather than a benign PDF link.
-
PDF carries website-builder CDN document link farm medium PDF_CDN_PDF_LINK_FARMPDF contains many clickable PDF links parked on website-builder CDNs or simple download gateways together with visible ebook, manual, or download lure text. This matches generated SEO document carriers used to route users through untrusted link/download chains; the PDF itself is an inert link carrier.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL https://cdn-cms.f-static.net/uploads/5258223/normal_60b3c3f3316a2.pdf PDF link annotation
- https://cdn-cms.f-static.net/uploads/5258187/normal_60b3be6176be5.pdfIn PDF document text
- https://cdn-cms.f-static.net/uploads/5258212/normal_60b3c27032f6d.pdfIn PDF document text
- https://cdn-cms.f-static.net/uploads/5258183/normal_60b3c3b968378.pdfIn PDF document text
- https://cdn-cms.f-static.net/uploads/5258206/normal_60b3c4828d1b5.pdfIn PDF document text
- https://cdn-cms.f-static.net/uploads/5258206/normal_60b3c1f20cf31.pdfIn PDF document text
- https://cdn-cms.f-static.net/uploads/5259103/normal_60b45b0036e63.pdfIn PDF document text
- https://cdn-cms.f-static.net/uploads/5259103/normal_60b45ade79460.pdfIn PDF document text
- https://cdn-cms.f-static.net/uploads/5259103/normal_60b45b117e743.pdfIn PDF document text
- https://cdn-cms.f-static.net/uploads/5259103/normal_60b45abd32fc4.pdfIn PDF document text
- https://cdn-cms.f-static.net/uploads/5259103/normal_60b45aee9fecb.pdfIn PDF document text
- https://cdn-cms.f-static.net/uploads/5259103/normal_60b458da7a0b3.pdfIn PDF document text
- https://cdn-cms.f-static.net/uploads/5259103/normal_60b45a6b52560.pdfIn PDF document text
- https://cdn-cms.f-static.net/uploads/5259103/normal_60b45878e44d5.pdfIn PDF document text
- https://cdn-cms.f-static.net/uploads/5259103/normal_60b457f6ba154.pdfIn PDF document text
- http://ser.litd.icu/dls.php?q=Hyundai+I+20+Repair+ManualIn PDF document text
- https://cdn-cms.f-static.net/uploads/5259103/normal_60b45acd6fa13.pdfIn PDF document text
- https://cdn-cms.f-static.net/uploads/5258183/normal_60b3bdde8707e.pdfIn PDF document text
- https://cdn-cms.f-static.net/uploads/5258210/normal_60b3c29a402b0.pdfIn PDF document text
- http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
- http://purl.org/dc/elements/1.1/In PDF document text
- http://ns.adobe.com/xap/1.0/In PDF document text
- http://ns.adobe.com/pdf/1.3/In PDF document text
Open this report in the interactive analyzer, or submit your own file for analysis.