MALICIOUS
94
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
T1204.002 Malicious Link
The PDF document contains a large number of external links, many of which advertise cracked software. The primary link points to a URL that appears to be a downloader for a malicious payload. This suggests the document is designed to trick users into downloading potentially harmful software.
Machine Learning
- Nyx PDF Classifier clean score 0.0314
Heuristics 4
-
Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARMSmall PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
-
PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LUREPDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://esecuritys.com/belleville/ZWljaGVyYmVkaWVudW5nc2FubGVpdHVuZ3BkZgZWl.implied?viands=/hispanic/ZG93bmxvYWR8WTV2WTNFNGJIeDhNVFkxTnpFNE5qazFOWHg4TWpVM05IeDhLRTBwSUhKbFlXUXRZbXh2WnlCYlJtRnpkQ0JIUlU1ZA/mourned/radicalized/
- http://lovetrustfoundation.com/wp-content/uploads/2022/07/HD_Online_Player_Rab_Ne_Bana_Di_Jodi_Film_Full_Movie__WORK.pdf
- http://executivenavi.com/wp-content/uploads/2022/07/installshield_v12_cab_file_viewer_and_extractor_download.pdf
- https://fitenvitaalfriesland.nl/dm-artisan-1-2-4-plugin-for-sketchup-5/
- https://dabsisguvenlik.com/wp-content/uploads/2022/07/AutoCAD_2015_Et_Covadis_2015zip.pdf
- https://demo.takewp.com/listing/tpg-explore/advert/ciel-autoentrepreneur-premium-2013-crack-exclusive/
- http://klinikac.com/?p=23215
- https://studiolegalefiorucci.it/2022/07/08/nihongo-shoho-book-free-cracked-download/
- https://loveandhappiness.tv/x-ray-cat-survival-toolkit-download-new/
- http://lawcate.com/foxit-phantompdf-business-9-7-1-crack-patch-latest-better/
- https://www.mycatchyphrases.com/close-your-eyes-anniversary-remake-crack-patch-download-hot/
- https://postlistinn.is/x-force-keygen-adobe-master-collection-cs6instmanks-work
- https://cdn.geeb.xyz/upload/files/2022/07/eM72L2ZOhxGAo8UE8JJ7_08_b0ef707cb68308ab26ba9cc4763f6f6f_file.pdf
- https://www.nwu.ac.za/sites/www.nwu.ac.za/files/files/i-institutional-information/quickstats/NWU-QuickStats-2020-2021.pdf
- http://xn----btbbblceagw8cecbb8bl.xn--p1ai/orthopedics-mcqs-books-free-download-install/
- https://printeleven.com/wp-content/uploads/2022/07/judeadel.pdf
- https://www.chemfreecarpetcleaning.com/ljubavni-vikend-romani-za-citanje-besplatno-online-cracked/
- http://www.flexcompany.com.br/flexbook/upload/files/2022/07/SDkaCZejfSW2K5ZGEXPi_08_b0ef707cb68308ab26ba9cc4763f6f6f_file.pdf
- http://lovetrustfoundation.com/wp-
- http://executivenavi.com/wp-
- https://demo.takewp.com/listing/tpg-explore/advert/ciel-autoentrepreneur-premium-2013-crack-
- https://cdn.geeb.xyz/upload/files/2022/07/eM72L2ZOhxGAo8UE8JJ7_08_b0ef707cb68308ab26ba9cc4
- https://www.nwu.ac.za/sites/www.nwu.ac.za/files/files/i-institutional-information/quickstats/NWU-
- https://www.chemfreecarpetcleaning.com/ljubavni-vikend-romani-za-citanje-besplatno-online-
- http://www.flexcompany.com.br/flexbook/upload/files/2022/07/SDkaCZejfSW2K5ZGEXPi_08_b0ef707
- https://wakelet.com/wake/83e30xilvAoc9RrscS1-Y
- https://stinger-live.s3.amazonaws.com/upload/files/2022/07/HFELArLxu4VM4pgdDx8Q_08_13575f7b225383e8397f8c7ebd81485b_file.pdf
- https://fd.lisboa.ucp.pt/pt-pt/system/files/webform/lachraff196.pdf
- http://www.tcpdf.org
- https://stinger-live.s3.amazonaws.com/upload/files/2022/07/HFELArLxu4VM4pgdDx8Q_08_13575f7b2
- http://www.w3.org/1999/02/22-rdf-syntax-ns#
- http://purl.org/dc/elements/1.1/
- http://ns.adobe.com/xap/1.0/
- http://ns.adobe.com/pdf/1.3/
- http://ns.adobe.com/xap/1.0/mm/
- http://www.aiim.org/pdfa/ns/extension/
- http://www.aiim.org/pdfa/ns/schema#
- http://www.aiim.org/pdfa/ns/property#
- http://www.aiim.org/pdfa/ns/id/
Open this report in the interactive analyzer, or submit your own file for analysis.