Malicious PDF — malware analysis report

Heuristics 5

• ClamAV: Pdf.Phishing.TtraffRobotInstall-7605656-0 critical CLAMAV_DETECTION
  ClamAV detected this file as malware: Pdf.Phishing.TtraffRobotInstall-7605656-0
• Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
  Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
• Security software disable instruction high SE_SECURITY_BYPASS
  Document instructs the user to disable antivirus or security software — unusual for ordinary documents and high-risk in an unsolicited file
• Document signing service impersonation lure medium SE_DOCUSIGN_LURE
  Document impersonates DocuSign, Adobe Sign, or a similar signing service in a signing-request context
• Embedded URL info EMBEDDED_URL
  One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
  URL http://motorheadtv.com/uploads/1/3/0/6/130621214/1acf871c1.pdf In PDF document text

  • http://latinasazon.com/uploads/1/3/0/5/130539987/nisiponitiwere.pdfIn PDF document text
  • http://inourworld.net/uploads/1/3/0/3/130379415/11d363e820b3.pdfIn PDF document text
  • http://taxauctiontitle.com/uploads/1/3/0/6/130604232/817dd5babaa9bbb.pdfIn PDF document text
  • http://weveg.com/uploads/1/3/0/7/130775712/sujejus_topubazekisatag_zepevutuso.pdfIn PDF document text
  • http://mshvita.com/uploads/1/3/0/5/130542964/tonurefevikadus-tagugedepiva-rosalo.pdfIn PDF document text
  • http://budapestfoodandtravel.com/uploads/1/3/0/8/130814584/bonedudubevexax_kuwoz.pdfIn PDF document text
  • http://psychotherapyportland.net/uploads/1/3/0/7/130776219/3999938.pdfIn PDF document text
  • http://aikotanaka.com/uploads/1/3/0/4/130483271/f0a3b07b.pdfIn PDF document text
  • http://smokyhillcheer.com/uploads/1/3/0/5/130551864/2840637.pdfIn PDF document text
  • http://youarebow.com/uploads/1/3/0/4/130478106/7296147.pdfIn PDF document text
  • http://youwishmanifestation.com/uploads/1/3/0/7/130776312/4843736.pdfIn PDF document text
  • http://biglifecc.com/uploads/1/3/0/4/130436093/4768918.pdfIn PDF document text
  • http://www.sacraflora.com/uploads/1/3/0/2/130271090/jegusapa.pdfIn PDF document text
  • http://lesvioliles.cat/uploads/1/3/0/7/130739385/sevifelesezo_mawukodofibir_tixipuwax_vuniretir.pdfIn PDF document text
  • http://myeclecticyoga.com/uploads/1/3/0/5/130539871/9617ef353627.pdfIn PDF document text
  • http://www.thefuntasticfoodjourney.com/uploads/1/3/0/7/130740232/xibul.pdfIn PDF document text
  • http://www.hairnl.com/uploads/1/3/0/6/130603731/kudereferadem-dukexonelexonit-lubofakakojeli.pdfIn PDF document text
  • http://longplumbers.com/uploads/1/3/0/6/130639178/dewug_wufeximeva_kogeduwokinoba.pdfIn PDF document text
  • http://seattlebreastfeedinghikes.com/uploads/1/3/0/4/130478882/dafokepegot_jodejuvalub.pdfIn PDF document text
  • http://itavuvu.com/uploads/1/3/0/8/130814411/vevowedovusosuroti.pdfIn PDF document text
  • http://www.supermombc.com/uploads/1/3/0/6/130621515/9888026.pdfIn PDF document text
  • http://www.stevemorrisontuition.com/uploads/1/3/0/3/130323250/konawo.pdfIn PDF document text
  • http://cookacousticalconsultants.com/uploads/1/3/0/2/130287502/896264.pdfIn PDF document text
  • http://plantifulfoods.org/uploads/1/3/0/7/130776478/130776478.html#adobe+reader+dc+pro+download+freeIn PDF document text
  • http://www.adobe.com/).NotoIn PDF document text
  • http://www.google.com/get/noto/http://www.adobe.com/type/ThisIn PDF document text
  • http://scripts.sil.org/OFLNotoIn PDF document text
  • http://dejavu.sourceforge.netIn PDF document text
  • http://dejavu.sourceforge.net/wiki/index.php/LicenseIn PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.