Malicious PDF — malware analysis report

Heuristics 6

• Cracked-software lure uses shortlink/download gateway critical PDF_CRACKED_SOFTWARE_SHORTLINK_LURE
  PDF visible text advertises a crack, serial number, archive, or pirated-software download and pairs it with a shortlink or encoded download gateway. This is a high-confidence social-engineering carrier for unwanted software or droppers; the PDF itself is not a parser exploit.
• Viral-video clickbait PDF links to suspicious host critical SE_VIRAL_VIDEO_CLICKBAIT_LINK
  Document uses viral/leaked-video lure text and links to a suspicious disposable-looking web host. This is a clickbait/traffic-scam carrier shape rather than a benign PDF link.
• Cracked-software lure uses download-gateway redirectors high PDF_CRACKED_SOFTWARE_REDIRECTOR_LINK_FARM
  PDF contains multiple cracked-software/keygen/serial-key lure links together with long encoded download-gateway URLs or known crack-download redirector hosts. This is stronger than generic piracy vocabulary: the document is an SEO lure that funnels users through redirect/download infrastructure commonly used for adware, unwanted software, or droppers.
• PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LURE
  PDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
• External URI info PDF_URI
  PDF contains an external URL action
• Embedded URL info EMBEDDED_URL
  One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
  URL http://findthisall.com/QWRvYmUgQWZ0ZXIgRWZmZWN0cyBDQyAyMDE3IHYxNC4wLjEgSW5jbCBDcmFjayBbU2FkZWVtUENdIGZ1bGwgdmVyc2lvbgQWR.leftfield.saab/tithing/ZG93bmxvYWR8TTZoTVRKd2JYSjhmREUyTmpJMk9EQXpPVEI4ZkRJMU9UQjhmQ2hOS1NCWGIzSmtjSEpsYzNNZ1cxaE5URkpRUXlCV01pQlFSRVpk.speed].moonwhisper/ PDF link annotation

  • https://chateaudelacazette.fr/?p=16997In PDF document text
  • https://www.scoutgambia.org/resident-evil-5-pc-jill-mod-18-portable-7/In PDF document text
  • https://ayurvedology.com/wp-content/uploads/2022/09/HACK_Adobe_Acrobat_XI_Pro_12023_FINAL_Crack.pdfIn PDF document text
  • http://balancin.click/legend-of-kay-anniversary-android-apk-download-better/In PDF document text
  • https://kitchenwaresreview.com/fujio-girls-medical-shizuka-top/In PDF document text
  • https://logicbg.com/wp-content/uploads/2022/09/Uploaded_To_Coupon_Code_Generator.pdfIn PDF document text
  • https://www.ygeiologia.gr/advert/top-downloadwinmysqladminforwindows10/In PDF document text
  • https://9escorts.com/advert/natalie-3d-2010-1080p-bluray-halfsbs-dts-x264chd3d-public3d-hot/In PDF document text
  • https://dbsangola.com/wp-content/uploads/2022/09/darfin.pdfIn PDF document text
  • https://thehomeofheroes.org/getdataback-simple-1-02-serial-number-work/In PDF document text
  • http://naturopathworld.com/?p=14592In PDF document text
  • https://recipesja.com/wp-content/uploads/2022/09/Hotspot_Shield_For_Windows_7_64_Bit_Filehippo.pdfIn PDF document text
  • https://shelsyorganicstore.com/wp-content/uploads/2022/09/PreSonus_Studio_One_Pro_Keygen.pdfIn PDF document text
  • http://techque.xyz/?p=23010In PDF document text
  • https://dottoriitaliani.it/ultime-notizie/benessere/free-patched-download-shortcut-virus-cleaner/In PDF document text
  • https://bodhirajabs.com/khilona-full-top-movie-download-in-mp4-format/In PDF document text
  • https://blisscbdstore.com/wp-content/uploads/2022/09/faulea.pdfIn PDF document text
  • https://ebimarketing.com/wp-content/uploads/2022/09/Adobe_Acrobat_X_Pro_Lite_Portable_v1002.pdfIn PDF document text
  • https://katrinsteck.de/x-force-x32-exe-autocad-mechanical-2009-crack-link/In PDF document text
  • https://www.faceauxdragons.com/advert/1-to-100-english-spelling-pdf-exclusive-download/In PDF document text
  • https://ayurvedology.com/wp-In PDF document text
  • https://recipesja.com/wp-In PDF document text
  • https://ebimarketing.com/wp-In PDF document text
  • http://findthisall.com/qwrvymugqwz0zxigrwzmzwn0cybdqyaymde3ihyxnc4wljegsw5jbcbdcmfjaybbu2fkzwvtuendigz1bgwgdmvyc2lvbgqwr.leftfield.saab/tithing/zg93bmxvywr8ttzotvrkd2jysjhmreuytmpjmk9eqxppvei4zkrjmu9uqjhmq2hos1ncwgizsmtjsepsyznnz1cxae5urkpruxlcv01pqlfsrvpk.speed].moonwhisper/In PDF document text
  • https://ayurvedology.com/wp-content/uploads/2022/09/hack_adobe_acrobat_xi_pro_12023_final_crack.pdfIn PDF document text
  • http://www.tcpdf.orgIn PDF document text
  • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
  • http://purl.org/dc/elements/1.1/In PDF document text
  • http://ns.adobe.com/xap/1.0/In PDF document text
  • http://ns.adobe.com/pdf/1.3/In PDF document text
  • http://ns.adobe.com/xap/1.0/mm/In PDF document text
  • http://www.aiim.org/pdfa/ns/extension/In PDF document text
  • http://www.aiim.org/pdfa/ns/schema#In PDF document text
  • http://www.aiim.org/pdfa/ns/property#In PDF document text
  • http://www.aiim.org/pdfa/ns/id/In PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.