SUSPICIOUS
34
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
T1204.002 Malicious Link
The PDF document contains heuristics indicating it is a lure for cracked software, with multiple links to pirated software. One embedded URI, http://sitesworlds.com/bossy=unworthy/..., is flagged as external and suspicious, likely serving as a download or redirection point for a malicious payload. The document's structure and embedded links suggest a phishing or social engineering attack aimed at tricking users into downloading potentially harmful software.
Machine Learning
- Nyx PDF Classifier clean score 0.0063
Heuristics 3
-
PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LUREPDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://sitesworlds.com/bossy=unworthy/W0ZVTExdIGNlcml0YSBsZWdlbmRhIGNhbmRpIHByYW1iYW5hbiBkYWxhbSBiYWhhc2EgamF3YQW0Z.extraordinary?ZG93bmxvYWR8WTVOWm1GNVozeDhNVFkxTnpFNE5qazFOWHg4TWpVNE4zeDhLRTBwSUVobGNtOXJkU0JiUm1GemRDQkhSVTVk=invigoration PDF link annotation
- https://sweetangels.in/wp-content/uploads/2022/07/Windows_7_NVIDIA_Edition_2010_Final_x86_and_x64_ISO.pdfIn PDF document text
- https://telebook.app/upload/files/2022/07/ByYLuH1EFpUllWmqVXTo_08_c0d7cb1c6ed748e8fb6fb85d94ce0ed2_file.pdfIn PDF document text
- https://parleafrique.com/wp-content/uploads/2022/07/Siemens_Connexx_64_Download_13_40.pdfIn PDF document text
- https://erocars.com/free-songs-kishore-kumar-hindi-download-best/In PDF document text
- http://nii-migs.ru/?p=5988In PDF document text
- https://blu-realestate.com/tom-clancy-end-war-2-pc-torrent/In PDF document text
- http://www.interprys.it/?p=37805In PDF document text
- https://cuisinefavorits.online/oppo-a57-firmware-download-work/In PDF document text
- https://drtherapyplus.com/wp-content/uploads/2022/07/FSX_P3D_Supression_Flight_3D_Contrails_Cheats_No_Verification_Fixed.pdfIn PDF document text
- https://scent-line.com/wp-content/uploads/2022/07/Netframework35download_BESTsizehighlycompressed_9.pdfIn PDF document text
- https://secure-waters-52573.herokuapp.com/pataubad.pdfIn PDF document text
- https://www.acc.org.bt/sites/default/files/webform/complaints/zenhan621.pdfIn PDF document text
- https://salvationarmysalem.org/wp-content/uploads/2022/07/HD_Online_Player_hojas_Tabulares_De_4_Columnas_Pdf_Do_Extra_Quality.pdfIn PDF document text
- http://noverfood.com/kmsauto-net-2019-v1-5-4-portable-windows-office-activator/In PDF document text
- https://mxh.vvmteam.com/upload/files/2022/07/ksCJnkoVLpozBCT5tiVt_08_c0d7cb1c6ed748e8fb6fb85d94ce0ed2_file.pdfIn PDF document text
- https://www.parkersearch.com/sites/default/files/webform/geometria-descriptiva-nakamura-descargar-gratis.pdfIn PDF document text
- https://smartsizebuildings.com/advert/marine-sharpshooter-ii-jungle-warfare-full-crack-key-serial-number-upd/In PDF document text
- https://www.orcad.com/sites/default/files/webform/Genie-Backup-Manager-Pro-V90567891-CrackTE-Keygen.pdfIn PDF document text
- https://sweetangels.in/wp-In PDF document text
- https://telebook.app/upload/files/2022/07/ByYLuH1EFpUllWmqVXTo_08_c0d7cb1c6ed748e8fIn PDF document text
- https://parleafrique.com/wp-In PDF document text
- https://drtherapyplus.com/wp-content/uploads/2022/07/FSX_P3D_Supression_Flight_3D_ContIn PDF document text
- https://scent-line.com/wp-In PDF document text
- https://salvationarmysalem.org/wp-content/uploads/2022/07/HD_Online_Player_hojas_TabulaIn PDF document text
- https://mxh.vvmteam.com/upload/files/2022/07/ksCJnkoVLpozBCT5tiVt_08_c0d7cb1c6ed748In PDF document text
- https://www.parkersearch.com/sites/default/files/webform/geometria-descriptiva-nakamura-In PDF document text
- https://smartsizebuildings.com/advert/marine-sharpshooter-ii-jungle-warfare-full-crack-key-In PDF document text
- https://www.orcad.com/sites/default/files/webform/Genie-Backup-Manager-Pro-In PDF document text
- https://www.mcgill.ca/music/system/files/webform/software-diagnosi-auto-per-pc-gratis-downloadl.pdfIn PDF document text
- https://groups.oist.jp/ja/system/files/webform/30514/Geeksnerds-SQL-Recovery-300.pdfIn PDF document text
- http://www.tcpdf.orgIn PDF document text
- https://www.mcgill.ca/music/system/files/webform/software-diagnosi-auto-per-pc-gratis-In PDF document text
- http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
- http://purl.org/dc/elements/1.1/In PDF document text
- http://ns.adobe.com/xap/1.0/In PDF document text
- http://ns.adobe.com/pdf/1.3/In PDF document text
- http://ns.adobe.com/xap/1.0/mm/In PDF document text
- http://www.aiim.org/pdfa/ns/extension/In PDF document text
- http://www.aiim.org/pdfa/ns/schema#In PDF document text
- http://www.aiim.org/pdfa/ns/property#In PDF document text
- http://www.aiim.org/pdfa/ns/id/In PDF document text
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
font_00_sfnt_off000029b4.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x29B4 | 84508 bytes |
SHA-256: 2b7ba551bea82cc3307397981c1dbeb1b78486f95f2eb14e5e58d4e1b24edb0c |
|||
font_01_sfnt_off0000b1a0.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xB1A0 | 83036 bytes |
SHA-256: 6d13e73e85a502a13969f6a5eaecd0b275a0868c045f80b7d64ed55d70678261 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.