MALICIOUS
94
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
The PDF document contains a large number of external links, many of which advertise cracked software. One of the embedded URIs points to a suspicious domain that likely serves as a download source for malware. The document's structure and content indicate a lure to download pirated software, which is a common tactic for distributing malicious payloads.
Machine Learning
- Nyx PDF Classifier clean score 0.0115
Heuristics 4
-
Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARMSmall PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
-
PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LUREPDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://dawnloadonline.com/backbends/keyes/ZG93bmxvYWR8WGM3Tm1rMGNueDhNVFkxTmprNE1UVXdOSHg4TWpVM05IeDhLRTBwSUhKbFlXUXRZbXh2WnlCYlJtRnpkQ0JIUlU1ZA/comapny/ilona.UGhvdG9zaG9wIDIwMjEgKFZlcnNpb24gMjIuMikUGh.renaldo?sitton=couloirs PDF link annotation
- https://sharingfield.com/upload/files/2022/07/W43Lsr5boiK1EKvDJQS4_05_20d815c8c3ebee979ef2e9d4f51bf8a2_file.pdfIn PDF document text
- https://hgpropertysourcing.com/adobe-photoshop-2021-version-22-0-1-for-windows-march-2022/In PDF document text
- https://tchatche.ci/upload/files/2022/07/hnBqioMAb9rc5RunjnPV_05_20d815c8c3ebee979ef2e9d4f51bf8a2_file.pdfIn PDF document text
- https://walter-c-uhler.com/adobe-photoshop-cc-2019-crack-mega-free-download-updated-2022/In PDF document text
- https://www.keyringscustom.com.au/sites/www.keyringscustom.com.au/files/webform/Adobe-Photoshop-2022-Version-232.pdfIn PDF document text
- https://www.zinettica.com/en/system/files/webform/curriculums/adobe-photoshop-2021-version-2241.pdfIn PDF document text
- http://match2flame.com/photoshop-2020-version-21-universal-keygen/In PDF document text
- https://botkyrkaboxning.se/wp-content/uploads/2022/07/lathhend.pdfIn PDF document text
- https://immense-peak-05094.herokuapp.com/thomeha.pdfIn PDF document text
- http://ksycomputer.com/?p=32157In PDF document text
- https://freelance-difference.com/wp-content/uploads/2022/07/Adobe_Photoshop_CS5_Crack_Full_Version_.pdfIn PDF document text
- http://sanatkedisi.com/sol3/upload/files/2022/07/iIlathGts5rON3kgXzHK_05_d38c708b6d982c8c594de536944c00bd_file.pdfIn PDF document text
- https://tranquil-haleakala-91165.herokuapp.com/ormonady.pdfIn PDF document text
- https://thegoodsreporter.com/uncategorized/adobe-photoshop-2022-serial-number-and-product-key-crack-with-registration-code-latest-2022/In PDF document text
- http://www.danielecagnazzo.com/?p=31135In PDF document text
- https://houstonhousepc.com/photoshop-2021-version-22-4-2-universal-keygen-license-keygen-free-download-pc-windows-latest-2022/In PDF document text
- https://www.merrimacknh.gov/sites/g/files/vyhlif3456/f/uploads/2022_town_holidays.pdfIn PDF document text
- https://social.halvsie.com/upload/files/2022/07/bDapEgOAQMqG2Gf8CfSY_05_20d815c8c3ebee979ef2e9d4f51bf8a2_file.pdfIn PDF document text
- https://quiet-plateau-09344.herokuapp.com/Photoshop_CC_2015_version_16.pdfIn PDF document text
- https://dry-sea-50634.herokuapp.com/deakaf.pdfIn PDF document text
- https://alumbramkt.com/photoshop-cc-2019-version-20-keygen-crack-setup-activation-code-with-keygen/In PDF document text
- http://www.mtcnational.com/sites/default/files/webform/Photoshop-2021-Version-225.pdfIn PDF document text
- http://myquicksnapshot.com/?p=20365In PDF document text
- https://workplace.vidcloud.io/social/upload/files/2022/07/q2FwY8DhAGffJPnVTqHX_05_47a1dee1765a737da196bdb35bd18b39_file.pdfIn PDF document text
- https://www.theblender.it/adobe-photoshop-2021-version-22-3-keygen-exe-keygen-full-version-for-pc/In PDF document text
- https://canariasenvivo.com/wp-content/uploads/2022/07/Adobe_Photoshop.pdfIn PDF document text
- https://sharingfield.com/upload/files/2022/07/W43Lsr5boiK1EKvDJQS4_05_20d815c8c3ebee979ef2e9d4fIn PDF document text
- https://tchatche.ci/upload/files/2022/07/hnBqioMAb9rc5RunjnPV_05_20d815c8c3ebee979ef2e9d4f51bf8In PDF document text
- https://www.keyringscustom.com.au/sites/www.keyringscustom.com.au/files/webform/Adobe-In PDF document text
- https://www.zinettica.com/en/system/files/webform/curriculums/adobe-In PDF document text
- https://freelance-difference.com/wp-In PDF document text
- http://sanatkedisi.com/sol3/upload/files/2022/07/iIlathGts5rON3kgXzHK_05_d38c708b6d982c8c594de53In PDF document text
- https://thegoodsreporter.com/uncategorized/adobe-photoshop-2022-serial-number-and-product-key-In PDF document text
- https://houstonhousepc.com/photoshop-2021-version-22-4-2-universal-keygen-license-keygen-free-In PDF document text
- https://social.halvsie.com/upload/files/2022/07/bDapEgOAQMqG2Gf8CfSY_05_20d815c8c3ebee979ef2e9In PDF document text
- https://alumbramkt.com/photoshop-cc-2019-version-20-keygen-crack-setup-activation-code-with-In PDF document text
- https://workplace.vidcloud.io/social/upload/files/2022/07/q2FwY8DhAGffJPnVTqHX_05_47a1dee1765a737In PDF document text
- https://sededeme1975.wixsite.com/belpartsandxy/post/adobe-photoshop-2022-version-23-2-install-crack-activation-code-free-32-64bitIn PDF document text
- https://trello.com/c/3blpBbsd/93-adobe-photoshop-2022-version-230-keygen-generator-serial-keyIn PDF document text
- http://kiapodec.yolasite.com/resources/Adobe-Photoshop-2021-Version-2243-Keygen--Incl-Product-Key-PCWindows-April2022.pdfIn PDF document text
- https://emealjobs.nttdata.com/pt-pt/system/files/webform/adobe-photoshop-2022-_7.pdfIn PDF document text
- http://www.tcpdf.orgIn PDF document text
- https://sededeme1975.wixsite.com/belpartsandxy/post/adobe-photoshop-2022-version-23-2-install-crack-In PDF document text
- http://kiapodec.yolasite.com/resources/Adobe-Photoshop-2021-Version-2243-Keygen--Incl-Product-Key-In PDF document text
- http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
- http://purl.org/dc/elements/1.1/In PDF document text
- http://ns.adobe.com/xap/1.0/In PDF document text
- http://ns.adobe.com/pdf/1.3/In PDF document text
- http://ns.adobe.com/xap/1.0/mm/In PDF document text
+5 more URL(s)
🗂 Part of campaign:
secureserver.net
1471 samples
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
font_00_sfnt_off00003b63.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x3B63 | 84508 bytes |
SHA-256: 2b7ba551bea82cc3307397981c1dbeb1b78486f95f2eb14e5e58d4e1b24edb0c |
|||
font_01_sfnt_off0000c34f.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xC34F | 83036 bytes |
SHA-256: 6d13e73e85a502a13969f6a5eaecd0b275a0868c045f80b7d64ed55d70678261 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.