MALICIOUS
70
Risk Score
Malware Insights
MITRE ATT&CK
T1059.001 PowerShell
The file is a PDF document that contains an external URI pointing to a download link. The presence of a visual download button further suggests a social engineering attempt to trick the user into downloading a payload. ClamAV detection confirms the malicious nature of the file, identifying it as Pdf.Dropper.Agent-9243713-0. The embedded URLs are suspicious and likely serve as droppers for further malicious activity.
Heuristics 4
-
ClamAV: Pdf.Dropper.Agent-9243713-0 critical CLAMAV_DETECTIONClamAV detected this file as malware: Pdf.Dropper.Agent-9243713-0
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://uncpbisdegree.com/download3.php?q=winning-solar-car-design.pdf
- http://uncpbisdegree.com/download4.php?q=winning-solar-car-design.pdf
- http://ratiba.de/the/winning/the_winning_solar_car_design.pdf
- http://infoda.de/the/winning/the_winning_solar_car_design.pdf
- http://smshow.de/the/winning/the_winning_solar_car_design.pdf
- https://idragontech.co.uk/books/57286d/the_winning_solar_car_design.pdf
- http://grappi.de/the/winning/the_winning_solar_car_design.pdf
- http://riverside-resort.net/1/sony-xs-v1340h-speakers-owners-manual.pdf
- http://riverside-resort.net/1/solutions-manual-for-physics-fourth-edition-walker.pdf
- http://riverside-resort.net/1/sls-audio-rla-3-owners-manual.pdf
- http://riverside-resort.net/1/trial-exam-life-science-memo-paper-2.pdf
- http://riverside-resort.net/1/single-calculus-5th-edition-mccallum-solutions.pdf
- http://riverside-resort.net/1/tekonsha-envoy-brake-controller-manual.pdf
- http://riverside-resort.net/1/toyota-alternator-wiring.pdf
- http://riverside-resort.net/1/the-zaria-art-society.pdf
- http://riverside-resort.net/1/the-taste-of-home-cookbook-loose-leaf-janet-briggs.pdf
- http://riverside-resort.net/1/sony-dsc-h9-digital-cameras-owners-manual.pdf
- https://www.sae.org/images/books/toc_pdfs/R343.pdf
- https://www.amazon.com/Winning-Solar-Car-Design-Premiere/dp/0768011310
- https://www.amazon.com/Engineering-Transportation-Books/b?ie=UTF8&node=173507
- https://www.amazon.com/Automotive-Nonfiction-Books/b?ie=UTF8&node=10503
- https://0.r.bat.bing.com/?ld=d3vjXV0BrBZ01E7Qz-EGGSCjVUCUwxnjl6_B90gPRYo36MtquDsdHhXrwoqFpDoo2ENsoYHARWvTZq0WYhVvetgD4D9x-Hk4cWg_5by_BR23uGYJaOcuUyvdu6PPk6rUPO9ZpbG9m3RhH9lIWS6pJhvlSR-3lFsQASbBtlB6MGQGkBQD3W&u=http%3a%2f%2f5022.xg4ken.com%2ftrk%2fv1%3fprof%3d3%26camp%3d13622470%26affcode%3dpg208084%26kct%3dmsn%26kchid%3d1055003%26cid%3d77034579477404%26kdv%3dc%26kpid%3d9780768011319%26criteriaid%3dpla-4580634162243761%26queryStr%3dwinning%2520solar%2520car%2520design%26adgroupid%3d1232552628909191%26campaignid%3d279358634%26locphy%3d%26url%3dhttps%3a%2f%2fwww.barnesandnoble.com%2fw%2fwinning-solar-car-douglas-r-carroll%2f1112802690%3fean%3d9780768011319%26st%3dPLA%26sid%3dBNB_DRS_New%2bCore%2bShopping%2bTextbooks_00000000%262sid%3dBing_e%26sourceId%3dPLBiP208084%26msclkid%3d%7bmsclkid%7d&rlid=0cd9af781ead1e208e4af462a0b2b802
- https://3184402.r.bat.bing.com/?ld=d3ceFC05e2q7Lxsdi8WWGdxDVUCUz2sN6zPLRKBefQN5Dw71srMrugqMM2-NZ-ZwhArXVei3L4oPGdUkHENkNKWuC2V5AE20cvIwyy1nZJerTRHGDA5Vyt-WbjDeBM09-mEJTnyzbt81vBOfEpXBa7N7pm5yWg-E_a8Vf3KAI1DGlvovXP&u=https%3a%2f%2frover.ebay.com%2frover%2f1%2f711-213727-13078-0%2f2%3fmpre%3dhttp%253A%252F%252Fwww.ebay.com%252Fitm%252Flike%252F292548571099%26itemid%3d292548571099%26targetid%3d4581183917677945%26device%3dc%26adtype%3d%7badtype%7d%26googleloc%3d%26poi%3d%26campaignid%3d301076558%26adgroupid%3d1241348715250959%26rlsatarget%3dpla-4581183917677945%26abcId%3d1129776%26merchantid%3d51291%26query%3dwinning%2520solar%2520car%2520design&rlid=583347919df01b44e5021c8b23effe30
- https://0.r.bat.bing.com/?ld=d3C8MRBcymMfy3MeouG6hldzVUCUzPtriVZ5CiLyxZGSr21weRdO4G56jhRdQyRzUlr3wRg_FmPQV0h0d6xJBUumvi2MSECibXbo9s86lai20nRDZ_eyziD-RM6MR_mt4Gx0qkQcWjPN-pt6jWDBcl3l5V-jWvrKWbPmJ1rmzHluGENMyv&u=http%3a%2f%2ftracker.marinsm.com%2frd%3fcid%3dvkkb7e0xh0%26mkwid%3d3xGBwan3%26pcrid%3d73392450956934%26pdv%3dc%26lp%3dhttps%3a%2f%2fwww.abebooks.com%2fWinning-Solar-Design-Guide-Race-Teams%2f22558828793%2fbd%3fcm_mmc%3dmsn-_-used-_-PLA-_-v01%2526cm_mmc%253Dmsn-_-Bing%252BUS%252BShopping-_-Ad%252Bgroup%252B%2525231-_-%7bproduct_groups%7d&rlid=6f3e02465ebd1afad1c8595ce0a2f5e3
- https://3184402.r.bat.bing.com/?ld=d3Kqq65ZKzI4EWLTRDMD9eyTVUCUxmrP1mFXyPF6w0HfCkntWnoZdgk2xEJ4bVixURYf-PHjZTo5KgU-LOxNDRZyJ4-ORGy4pm0a1foP9UAfRCfnWOR85FquHGtXBEXpakzJP5DOq5tOg7iWR2vXzgh-M40BSSe678nI4XIq_9sfrz_A-L&u=https%3a%2f%2frover.ebay.com%2frover%2f1%2f711-213727-13078-0%2f2%3fmpre%3dhttp%253A%252F%252Fwww.ebay.com%252Fitm%252Flike%252F382464664919%26itemid%3d382464664919%26targetid%3d4580702880687428%26device%3dc%26adtype%3d%7badtype%7d%26googleloc%3d%26poi%3d%26campaignid%3d301076562%26adgroupid%3d1233652102156664%26rlsatarget%3dpla-4580702880687428%26abcId%3d1129776%26merchantid%3d51291%26query%3dwinning%2520solar%2520car%2520design&rlid=a0dd25aade34127339bf7eb0602b1849
- https://spectrum.ieee.org/green-tech/solar/the-tech-behind-the-winning-solar-car
- https://spectrum.ieee.org/green-tech
- https://spectrum.ieee.org/green-tech/solar
- https://www.goodreads.com/book/show/1052133.The_Winning_Solar_Car
- https://books.google.com/books/about/The_Winning_Solar_Car.html?id=3OfRHAAACAAJ
- https://www.google.com/search?tbo=p&tbm=bks&q=subject
- https://1839122.r.bat.bing.com/?ld=d3nhRslaZG-gHJmBizTpruETVUCUwpjBlj34Owi-xbr774rQfJeOuOcWiHE3yEle9JqF_b32_ONraJLoq_w96hDgoKg7SqKIzlA_0uSSlkaCTi-cbPLxMJXVDbhLaF_dx2UuBxeUIcVmfZkQ2LbtIE0nXQscqEn4xXE-wCsoP5WmuV_dXu&u=http%3a%2f%2fwww.amazon.com%2fdp%2f0768011310%2f%3ftag%3dmh0b-20%26hvadid%3d3521658996%26hvqmt%3dp%26hvbmt%3dbp%26hvdev%3dc%26ref%3dpd_sl_6y0necbtnh_p&rlid=6112238631d01439c2d8789c8fcffa2e
- https://138001958.r.bat.bing.com/?ld=d32_xczTrprwh-b3RDJ6JeqjVUCUzUcFPuFBrxxQ5skYDcksV_rDSM--ZESOBxBFH5GDfVI2AYn3NfPZ2D4TCHTuVsrrpoDmeP-PecGWz41sEhmu46Uq1yz4pHFQGah-Th9etTNJ_Pm0gkhEArfV3MnBAF466Zs9-fC5lKcJnhYqHwvgmx&u=http%3a%2f%2ftracker.marinsm.com%2frd%3fcid%3d26xu0nx0k0%26mkwid%3dvOycmKvL%7cpcrid%7c73667379451738%7cpmt%7cbb%7cpkw%7c%252Bsolar%2520%252Bwin%7cpdv%7cc%7cpgrid%7c1178676907777718%7cptaid%7ckwd-73667349412139%3aloc-190%7cslid%7c%7c%26lp%3dhttp%253A%252F%252Fwww.solarwinds.com%253FCMP%253DKNC-TAD-MSN-SW_EE_LBN_PP_CPC_LD_EN_BRDB_DWA-268498552%7e1178676907777718_o_c_%252Bsolar%2520%252Bwin-bb%7e73667379451738%7e%2526kwid%253DvOycmKvL&rlid=45b5bee997771d8ae633e5f3296842ba
- http://go.microsoft.com/fwlink/?LinkID=617350
- http://go.microsoft.com/fwlink/?LinkId=521839&CLCID=0409
- http://go.microsoft.com/fwlink/?LinkID=246338&CLCID=0409
- https://go.microsoft.com/fwlink/?linkid=868922
- http://go.microsoft.com/fwlink/?LinkID=286759&CLCID=409
- http://go.microsoft.com/fwlink/?LinkID=617297
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
font_00_sfnt_off0000e691.bin855979e683ff77db6d4e6db4ad8347c3e6537454e773bc01e389fddb49b48c87 |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xE691 | 15108 bytes |
font_01_sfnt_off0001144c.bin5177d88214fff7236140d10f52ffc52ed96192499b817321af609f962db54c25 |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x1144C | 10480 bytes |
Open this report in the interactive analyzer, or submit your own file for analysis.