Malicious PDF — malware analysis report

Heuristics 5

• Cracked-software lure uses shortlink/download gateway critical PDF_CRACKED_SOFTWARE_SHORTLINK_LURE
  PDF visible text advertises a crack, serial number, archive, or pirated-software download and pairs it with a shortlink or encoded download gateway. This is a high-confidence social-engineering carrier for unwanted software or droppers; the PDF itself is not a parser exploit.
• Cracked-software lure uses download-gateway redirectors high PDF_CRACKED_SOFTWARE_REDIRECTOR_LINK_FARM
  PDF contains multiple cracked-software/keygen/serial-key lure links together with long encoded download-gateway URLs or known crack-download redirector hosts. This is stronger than generic piracy vocabulary: the document is an SEO lure that funnels users through redirect/download infrastructure commonly used for adware, unwanted software, or droppers.
• PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LURE
  PDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
• External URI info PDF_URI
  PDF contains an external URL action
• Embedded URL info EMBEDDED_URL
  One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
  URL http://widesearchengine.com/aunty/myfico/RGllIFNpbXMgMyBUcmF1bXN1aXRlIEFjY2Vzc29pcmVzIENyYWNrRGl.potent.birdlike?ZG93bmxvYWR8eTdCTVRNMVkyRjhmREUyTmpJMk9EQXpPVEI4ZkRJMU9UQjhmQ2hOS1NCWGIzSmtjSEpsYzNNZ1cxaE5URkpRUXlCV01pQlFSRVpk=searchlist=starsky PDF link annotation

  • http://googlepages.in/wp-content/uploads/2022/09/chawarw-1.pdfIn PDF document text
  • https://earthoceanandairtravel.com/2022/09/11/taare-zameen-par-download-bluray-27-_verified_/In PDF document text
  • https://slitetitle.com/wp-content/uploads/2022/09/erlrexa.pdfIn PDF document text
  • http://orakprecast.net/45739.htmlIn PDF document text
  • https://captainseduction.fr/gsa-search-engine-ranker-14-44-crack-__exclusive__-plus-serial-key-update/In PDF document text
  • http://thetruckerbook.com/2022/09/11/eureka-3-ispiti-znanja-priroda-pdf/In PDF document text
  • https://inmobiliaria-soluciones-juridicas.com/2022/09/sentico-sans-dt-free-fixIn PDF document text
  • https://www.theleadingnetwork.tv/wp-content/uploads/2022/09/yamajam.pdfIn PDF document text
  • https://slitetitle.com/nero-9-keygen-free-chomikuj-18/In PDF document text
  • https://unsk186.ru/download-arcgis-9-2-full-crack-install/In PDF document text
  • https://boomerlife-icaniwillwatchme.com/wp-content/uploads/2022/09/The_Sims_3_Full_LINK_Store_Blue_River_2016_Repack_By_Sim_Architect.pdfIn PDF document text
  • https://superstitionsar.org/vibraciones-y-ondas-de-ap-french-solucionario/In PDF document text
  • http://bariatric-club.net/?p=61329In PDF document text
  • https://anticonuovo.com/wp-content/uploads/2022/09/caillan.pdfIn PDF document text
  • https://ig-link.com/wp-content/uploads/CourseLab_27rar.pdfIn PDF document text
  • http://kinectblog.hu/heat-transfer-incropera-solution-iht-software-new.htmlIn PDF document text
  • http://villa-mette.com/?p=79001In PDF document text
  • https://bskworld.com/wp-content/uploads/2022/09/Residentevil4moviesfolderFULL_Download.pdfIn PDF document text
  • https://ramseyfarmauction.com/2022/09/11/hd-online-player-woodstock-portable-full-movie-1969-720p-torrentgolkes/In PDF document text
  • https://qeezi.com/advert/127-hours-1080p-hindi-movies/In PDF document text
  • https://earthoceanandairtravel.com/2022/09/11/taare-zameen-par-download-In PDF document text
  • https://captainseduction.fr/gsa-search-engine-ranker-14-44-crack-__exclusive__-plus-serial-In PDF document text
  • https://boomerlife-icaniwillwatchme.com/wp-content/uploads/2022/09/The_Sims_3_Full_LINIn PDF document text
  • https://bskworld.com/wp-In PDF document text
  • https://ramseyfarmauction.com/2022/09/11/hd-online-player-woodstock-portable-full-In PDF document text
  • http://widesearchengine.com/aunty/myfico/rgllifnpbxmgmybucmf1bxn1axrliefjy2vzc29pcmvzienyywnrrgl.potent.birdlike?zg93bmxvywr8etdctvrnmvkyrjhmreuytmpjmk9eqxppvei4zkrjmu9uqjhmq2hos1ncwgizsmtjsepsyznnz1cxae5urkpruxlcv01pqlfsrvpk=searchlist=starskyIn PDF document text
  • http://www.tcpdf.orgIn PDF document text
  • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
  • http://purl.org/dc/elements/1.1/In PDF document text
  • http://ns.adobe.com/xap/1.0/In PDF document text
  • http://ns.adobe.com/pdf/1.3/In PDF document text
  • http://ns.adobe.com/xap/1.0/mm/In PDF document text
  • http://www.aiim.org/pdfa/ns/extension/In PDF document text
  • http://www.aiim.org/pdfa/ns/schema#In PDF document text
  • http://www.aiim.org/pdfa/ns/property#In PDF document text
  • http://www.aiim.org/pdfa/ns/id/In PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.