MALICIOUS
106
Risk Score
Machine Learning
- Nyx PDF Classifier suspicious score 0.3822
Heuristics 5
-
ClamAV: Pdf.Phishing.Trojan-d2568dad23a94d95-d2568dad23a94d95-10044375-0 critical CLAMAV_DETECTIONClamAV detected this file as malware: Pdf.Phishing.Trojan-d2568dad23a94d95-d2568dad23a94d95-10044375-0
-
Image lure linking to an SEO redirector (free-download phishing) high PDF_SEO_UTM_REDIRECTOR_LINKPDF embeds an image with little or no body text and a clickable link to a multi-word utm_term / FeedBurner-proxied SEO redirector — the 'free ebook / solution-manual / document download' phishing family that ranks for natural-language search queries and routes the user into a payload/redirect chain. The PDF carries no exploit; the risk is the linked destination. Flagged structurally (image lure + SEO redirector) so it does not depend on a ClamAV/ML signature, and regardless of how many filler text pages the lure carries.
-
External URI info PDF_URIPDF contains an external URL action
-
Object number defined twice with different bodies info PDF_DUPLICATE_OBJ_BODY_INCREMENTALThe same indirect object (N G) is defined more than once with different body bytes. First-wins and last-wins readers will resolve different content, which is a parser-confusion shape used by targeted PDFs. Body-only differences are common in benign incremental updates, so severity is raised only when the duplicate carries active content.
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL https://tevav.co.za/XSRYdR1H?utm_term=lego+indiana+jones+2%3A+the+adventure+continues PDF link annotation
- http://videlec.be/ressource/file/kavututugubedulifiwifojeg.pdfIn PDF document text
- https://nipobajomofak.weebly.com/uploads/1/3/4/6/134641158/fikigonazuj.pdfIn PDF document text
- http://cartopack.com/Images/file/vatepu.pdfIn PDF document text
- http://struna.bg/admin/kcfinder/upload/files/33590561405.pdfIn PDF document text
- https://kekisuganuzab.weebly.com/uploads/1/3/4/7/134721312/vatoze.pdfIn PDF document text
- https://xifopuwo.weebly.com/uploads/1/3/4/8/134852026/6806858.pdfIn PDF document text
- https://redodire.weebly.com/uploads/1/3/1/4/131408340/9296e.pdfIn PDF document text
- http://sydjpg.com/images/upload/file/20220327_202324_155.pdfIn PDF document text
- https://aakritidigitals.com/userfiles/files/gisumagidesurobesifulu.pdfIn PDF document text
- http://asia-test.informacittadino.net/media/files/wekefidoxunegotu.pdfIn PDF document text
- https://anglers.mtcserver6.com/UserFiles/File/66071501718.pdfIn PDF document text
- https://www.madenisg.org.tr/kcfinder/upload/files/rilum.pdfIn PDF document text
- http://emeraldcovepartners.com/_data/images/file/2595036212.pdfIn PDF document text
- http://freeware-software-download.de/uploads/editor/file/solifozipiteduzalutegiwa.pdfIn PDF document text
- http://auto-fiesta.ru/upload/files/64639327524.pdfIn PDF document text
- http://sv-orhidea.ru/upload/files/radululolozisuduzijuvesa.pdfIn PDF document text
- https://lafowesatumu.weebly.com/uploads/1/3/4/5/134503032/kubefijorarobez-dulusinepowa.pdfIn PDF document text
- https://repavubujog.weebly.com/uploads/1/3/4/4/134486674/8272279.pdfIn PDF document text
- https://esperanzadeavila.com/fotos/file/83993405619.pdfIn PDF document text
- http://www.oiseaubleu-promo.fr/userfiles/file/koditopegefovijebobirawa.pdfIn PDF document text
- http://robvancampen.nl/userfiles/file/56624504703.pdfIn PDF document text
- https://kitejunozog.weebly.com/uploads/1/3/4/3/134319277/8558528.pdfIn PDF document text
- https://mabalavorejeg.weebly.com/uploads/1/3/4/7/134769590/e9a350.pdfIn PDF document text
- http://kuhomania.ru/ckfinder/userfiles/files/pasukukixotazu.pdfIn PDF document text
- https://nirkongrp.com/ckfinder/userfiles/files/kedoki.pdfIn PDF document text
- https://dugeditukuvil.weebly.com/uploads/1/3/4/7/134723955/gitobi-jidexodi-xagigegekalomu.pdfIn PDF document text
- http://pluimveebeurs.com/userfiles/file/tufewofamodibuzelujod.pdfIn PDF document text
- http://armoire-atex.com/js/kcfinder/upload/files/sekufisanafofagaw.pdfIn PDF document text
- http://savytrading.com/userfiles/file/situnuvukipu.pdfIn PDF document text
- https://pukexomupuko.weebly.com/uploads/1/3/1/1/131164185/44a6184.pdfIn PDF document text
- https://guapa2.com/admin/fck/file/logupomujapukaf.pdfIn PDF document text
- https://zakazorexan.weebly.com/uploads/1/3/1/4/131407051/9cfc99865.pdfIn PDF document text
- http://creativecoms.net/userfiles/file/sovofovonuw.pdfIn PDF document text
- http://atlantidaagency.com/kcfinder/upload/files/23706404483.pdfIn PDF document text
- http://robvancampen.nl/userfiles/file/34399808618.pdfIn PDF document text
- https://fodewifejala.weebly.com/uploads/1/3/4/4/134491976/fumexegu.pdfIn PDF document text
- https://mimzyonline.com/userfiles/file/vomagenewodizaxinel.pdfIn PDF document text
- http://churchtextile.com/userfiles/file/nibebowaritifikimapuje.pdfIn PDF document text
- http://aksaxena.com/bpms/includes/fckeditor_uploads/userfiles/file/zukanenubunopubif.pdfIn PDF document text
- http://easytravel63.ru/ckfinder/userfiles/files/98070037893.pdfIn PDF document text
- https://postelezmasivu-zlin.cz/ckfinder/userfiles/files/17099569780.pdfIn PDF document text
- https://pevivifigevesiw.weebly.com/uploads/1/3/5/3/135315965/5a016ec27308e79.pdfIn PDF document text
- https://powermailer.in/userfiles/file/pexijezi.pdfIn PDF document text
- http://ndemal.com/publish/page/file/dutomunisop.pdfIn PDF document text
- https://wedarudojov.weebly.com/uploads/1/3/4/0/134012757/wofutare.pdfIn PDF document text
- https://sankaibearing.com/userfiles/files/51910494392.pdfIn PDF document text
- https://nobenore.weebly.com/uploads/1/3/2/6/132696051/dabukixe-fejukarugufub.pdfIn PDF document text
- http://xenangheli.vn/public/files/49319025827.pdfIn PDF document text
- http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
+7 more URL(s)
Extracted artifacts 3
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
font_00_sfnt_off00081b88.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x81B88 | 11092 bytes |
SHA-256: 3aa49e5ec72f9c81d00b49c4d70bad3057626b65091c521417ad3ee5ee9920dd |
|||
font_01_sfnt_off00083512.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x83512 | 18188 bytes |
SHA-256: 4d3b3dc0fae8048adb9b718bd59d17af1131b79896619b7f60ed9ea44f8cdc65 |
|||
font_02_sfnt_off000864e1.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x864E1 | 16792 bytes |
SHA-256: 9d2294e344127da9ddc2b77d68b1576b6b78373885bc9da2859f180a98f2c1e1 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.