SUSPICIOUS
34
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
T1059.007 JavaScript
The PDF document contains embedded URLs that are presented as instructions for a "crib conversion kit". The ML classifier strongly flagged this PDF as malicious, and the presence of multiple external URLs suggests an attempt to redirect the user to a potentially harmful site. No scripts were extracted, but the document structure and embedded URLs indicate a phishing or social engineering lure.
Machine Learning
- Nyx PDF Classifier malicious score 0.9740
Heuristics 2
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://montaigneandmadison.com/uploads/1/3/0/6/130620890/130620890.html#munire+crib+conversion+kit+instructions PDF link annotation
- http://elliottwheelerthelongtimepreview.com/uploads/1/3/0/5/130541443/d81da2.pdfIn PDF document text
- http://74-123-79-202.mgwnet.com/uploads/1/3/0/2/130271078/xusujogejoduj.pdfIn PDF document text
- http://bryanwalton.com/uploads/1/3/0/5/130589230/xugov.pdfIn PDF document text
- http://isabellabriggs.com/uploads/1/3/0/5/130544379/dijesirelexavezebu.pdfIn PDF document text
- http://kalliegay.com/uploads/1/3/0/5/130545954/woxirizoxurewe_zonugusopamowod_dobamirojos_wupuguparata.pdfIn PDF document text
Open this report in the interactive analyzer, or submit your own file for analysis.