Malicious PDF — malware analysis report

Heuristics 3

• Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
  Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
• External URI info PDF_URI
  PDF contains an external URL action
• Embedded URL info EMBEDDED_URL
  One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
  URL http://evacdir.com/UG93ZXJTaGFwZSBzaHggZm9udHMgZnJlZSBkb3dubG9hZAUG9.procrastination/devaluation?datum.floppy=ZG93bmxvYWR8NTVxWm5aak9IeDhNVFkxTkRnNU16RTVNWHg4TWpVNU1IeDhLRTBwSUZkdmNtUndjbVZ6Y3lCYldFMU1VbEJESUZZeUlGQkVSbDA PDF link annotation

  • http://antiquesanddecor.org/?p=9571In PDF document text
  • http://www.360sport.it/advert/the-download-of-the-specified-resource-has-failed-msxml3-dll/In PDF document text
  • https://unoticket.com/wp-content/uploads/2022/06/beramr.pdfIn PDF document text
  • https://check-list-demenagement.fr/wp-content/uploads/2022/06/Embedded_Systems_Ebook_Pdf_Free_Download.pdfIn PDF document text
  • http://marrakechtourdrivers.com/advert/spaceengineersv01003007licensekey/In PDF document text
  • https://sarahebott.org/wp-content/uploads/2022/06/xireray.pdfIn PDF document text
  • https://bascomania.com/wp-content/uploads/2022/06/Train_Simulator_Hidaka_Main_Line_Tomakomai__HidakaMombetsu_R.pdfIn PDF document text
  • https://csermooc78next.blog/wp-content/uploads/2022/06/oasys_gsa_suite_85_cracked.pdfIn PDF document text
  • https://www.madreandiscovery.org/fauna/checklists/checklist.php?clid=23961In PDF document text
  • https://xplico.no/wp-content/uploads/2022/06/janeash.pdfIn PDF document text
  • https://corona-station.com/wp-content/uploads/2022/06/sims_3_ver_11760_crackrar.pdfIn PDF document text
  • https://www.distributorbangunan.com/sims-4-wrestling-mod/In PDF document text
  • http://tekbaz.com/2022/06/11/cakewalk-rapture-122-dxi-vsti-rtas-x32-64-serial/In PDF document text
  • https://pinkandblueparenting.com/advert/film-indian-cu-lantul-amintirilor/In PDF document text
  • https://www.yildizbots.com/wp-content/uploads/2022/06/nouveau_delf_b2_pdf_download.pdfIn PDF document text
  • https://suchanaonline.com/titanfall-2-pc-game-nosteamro-full-version-2021/In PDF document text
  • https://okinawahousingportal.com/recover-my-files-v3-9-8-6081-inc-portable-keygen-rogue-serial-key/In PDF document text
  • https://gaming-walker.com/upload/files/2022/06/t3AcarcADmhxEKThGd5v_11_4080cce8184383a21c70e29b23a4990a_file.pdfIn PDF document text
  • https://landskronacityguide.com/wp-content/uploads/2022/06/Ivt_virtual_0000_Driver_Windows_7_64_15.pdfIn PDF document text
  • https://www.5etwal.com/wp-content/uploads/2022/06/Newleicasurveyoffice22164bitsfreedownload.pdfIn PDF document text
  • https://bascomania.com/wp-In PDF document text
  • http://www.tcpdf.orgIn PDF document text
  • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
  • http://purl.org/dc/elements/1.1/In PDF document text
  • http://ns.adobe.com/xap/1.0/In PDF document text
  • http://ns.adobe.com/pdf/1.3/In PDF document text
  • http://ns.adobe.com/xap/1.0/mm/In PDF document text
  • http://www.aiim.org/pdfa/ns/extension/In PDF document text
  • http://www.aiim.org/pdfa/ns/schema#In PDF document text
  • http://www.aiim.org/pdfa/ns/property#In PDF document text
  • http://www.aiim.org/pdfa/ns/id/In PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.