Malicious PDF — malware analysis report

Static analysis result for SHA-256 793869961490eda8…

MALICIOUS

PDF

128.5 KB Created: 2022-09-13 14:19:27 +00:00 Authoring application: caelblad (via PDF Master 1.0.1) First seen: 2026-06-14
MD5: 010483c69376f1c42bcf3bbda59baee8 SHA-1: 4513a3545af77266757bf29fd7c68f42dd146ac5 SHA-256: 793869961490eda82f0d9e0ed21328e3e9fef899113f22d01528e4e77e5cc10f
64 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0008

Heuristics 3

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://dormister.com/MDA0MjYtT0VNLTg5OTI2NjItMDAwMTAga2V5Z2VuMDA/ZG93bmxvYWR8Yk81TVc1NmFIQjhmREUyTmpJMk9EQXpPVEI4ZkRJMU9UQjhmQ2hOS1NCWGIzSmtjSEpsYzNNZ1cxaE5URkpRUXlCV01pQlFSRVpk/wrappers/?bedjackets.collisions=legalities PDF link annotation
    • https://inmobiliaria-soluciones-juridicas.com/wp-content/uploads/2022/09/heyddalb.pdfIn PDF document text
    • https://jeyrojas.net/wp-content/uploads/2022/09/HD_Online_Player_Thuppakki_2012TC_DVD_Untouched_800MB_Download_Tamil_Movie_TamilRockers_Ex.pdfIn PDF document text
    • http://www.kiwitravellers2017.com/2022/09/14/solucionario-de-resistencia-de-materiales-miroliubov/In PDF document text
    • https://gamersmotion.com/huaweifirmwarehg658b/In PDF document text
    • https://www.iltossicoindipendente.it/2022/09/13/hd-online-player-daisys-destruction-video-completo-2/In PDF document text
    • https://teenmemorywall.com/headus-uv-layout-v2-keygen-torrent-extra-quality/In PDF document text
    • https://www.buriramguru.com/wp-content/uploads/2022/09/Khulasa_Quran_Urdu_Pdf_Free.pdfIn PDF document text
    • https://thenetworkcircle.com/wp-content/uploads/2022/09/darill.pdfIn PDF document text
    • https://zariembroidery.com/wp-content/uploads/2022/09/handviv.pdfIn PDF document text
    • https://arteshantalnails.com/2022/09/13/championship-manager-00-01-download-patched-full-version/In PDF document text
    • https://webkhoacua.com/eddie-kramer-vst-plugins-free-17-better/In PDF document text
    • https://www.sumisurabespoke.it/wp-content/uploads/2022/09/jakyred-1.pdfIn PDF document text
    • http://antiquesanddecor.org/?p=72185In PDF document text
    • https://kunamya.com/snow-leopard-10-6-1-10-6-2-sse2-sse3-intel-amd-by-hazard-iso/In PDF document text
    • https://unsk186.ru/daishi-dance-spectacle-rar-free/In PDF document text
    • https://l1.intimlobnja.ru/battle-for-middle-earth-1-no-cd-crack-1-03-verified/In PDF document text
    • http://lovelyonadime.com/?p=10023In PDF document text
    • https://slitetitle.com/corey-hart-first-offense-1983-rar-link/In PDF document text
    • https://expressionpersonelle.com/internet-chess-killer-1-71-chess-program-rar-2/In PDF document text
    • https://silkfromvietnam.com/download-install-twilight-saga-breaking-dawn-part-1-in-hindi-dubbed/In PDF document text
    • http://www.tcpdf.orgIn PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text
    • http://www.aiim.org/pdfa/ns/extension/In PDF document text
    • http://www.aiim.org/pdfa/ns/schema#In PDF document text
    • http://www.aiim.org/pdfa/ns/property#In PDF document text
    • http://www.aiim.org/pdfa/ns/id/In PDF document text

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_009_off000192cb.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x192CB 119072 bytes
SHA-256: df221e87b81d1531cafdadb6c09a602e9f604d1baf0a17bbd350cbb83baa06f7

Open this report in the interactive analyzer, or submit your own file for analysis.