MALICIOUS
90
Risk Score
Malware Insights
MITRE ATT&CK
T1566.002 Spearphishing Attachment
T1204.002 Malicious File
The PDF contains a large number of embedded URLs, identified as a link farm, that point to other PDF documents. The ML classifier strongly indicated maliciousness. The primary attack pattern involves directing users to a large collection of external documents, likely as a form of SEO poisoning or to host malicious content disguised as legitimate files.
Machine Learning
- Nyx PDF Classifier malicious score 0.9919
Heuristics 2
-
Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARMSmall PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://loaminoo.linkpc.net/8096090096098099/The-KJV-Bible-King-James-Bible-Annotated-With-East-chapter-Navigation-Best-for-kindle-by-Anonymous.pdf
- http://loaminoo.linkpc.net/8090097097092099/King-James-The-Holy-Bible-the-bible-bible-bible-study-jesus-religion-religious-heaven-king-james-old-testament-new-testament-prayer-books-christian-by-Anonymous.pdf
- http://loaminoo.linkpc.net/8090093090091097/Holy-Bible---King-James-Version---New-amp-Old-Testaments-E-Reader-Formatted-KJV-w-Easy-Navigation-by-Anonymous.pdf
- http://loaminoo.linkpc.net/9091092098094099/The-Bible-English-German-Parallel-Version---King-James-1611-amp-Elberfelder-1905-Parallel-Bible-Halseth-Book-47-by-Anonymous.pdf
- http://loaminoo.linkpc.net/1090094091099090090/King-James-Bible-Ebook-by-Anonymous.pdf
- http://loaminoo.linkpc.net/5092094097094/Holy-Bible-King-James-Version-by-Anonymous.pdf
- http://loaminoo.linkpc.net/6093095095093092/The-Holy-Bible---King-James-Version---by-Anonymous.pdf
- http://loaminoo.linkpc.net/1091095094095094095/Holy-Bible---King-James-Version-Lightning-Link-Technology-by-Anonymous.pdf
- http://loaminoo.linkpc.net/6095096094090091/The-English-Bible-Translated-Out-Of-The-Original-Tongues-By-The-Commandment-Of-King-James-The-First-Anno-1611-V-5-1903-04-by-Anonymous.pdf
- http://loaminoo.linkpc.net/6096092098091094/KJV-1611-Bible-formatted-in-Chapters-Annotated-by-Anonymous.pdf
- http://loaminoo.linkpc.net/3094093091096098/Holy-Bible-One-Year-Bible-New-Living-Translation-Compact-Edition-by-Anonymous.pdf
- http://loaminoo.linkpc.net/1091099092097093090/The-Holy-Bible---ESV-Bible-The-Thinline-Edition-TruTone-Espresso-by-Anonymous.pdf
- http://loaminoo.linkpc.net/1091096099099091093/Holy-Bible-New-International-Version-with-concordance-dictionary-maps-and-other-Bible-study-resources-by-Anonymous.pdf
- http://loaminoo.linkpc.net/6092095092097/The-Macarthur-Study-Bible-New-American-Standard-Bible-by-Anonymous.pdf
- http://loaminoo.linkpc.net/3097095093091090/The-Kindle-Publishing-Bible-How-to-Sell-More-Kindle-eBooks-on-Amazon-by-Tom-Corson-Knowles.pdf
- http://loaminoo.linkpc.net/5091090095096/The-MacArthur-Daily-Bible-Read-through-the-Bible-in-one-year-with-notes-from-John-MacArthur-by-Anonymous.pdf
- http://loaminoo.linkpc.net/9096093097090099/The-Bible-by-Anonymous.pdf
- http://loaminoo.linkpc.net/5095090099090097/Bible-by-Anonymous.pdf
- http://loaminoo.linkpc.net/4093090090092/Study-Bible-NIV-by-Anonymous.pdf
- http://loaminoo.linkpc.net/5092092090090/KJV-Study-Bible-by-Anonymous.pdf
- http://loaminoo.linkpc.net/9091092098094099/The-Bible-English-German-Parallel-Version---King-James-1611-amp-Elberfel
Open this report in the interactive analyzer, or submit your own file for analysis.