MALICIOUS
64
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
T1204.002 Malicious Link
The PDF file contains a large number of external links, many of which appear to be part of an SEO link farm. The heuristic 'PDF_SEO_LINK_FARM' indicates a mass of external PDF links, and the presence of URLs like 'http://bestentrypoint.com/carotidynia/' suggests a malicious intent to redirect users to potentially harmful content. No scripts were extracted from this sample.
Machine Learning
- Nyx PDF Classifier clean score 0.0104
Heuristics 3
-
Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARMSmall PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://bestentrypoint.com/carotidynia/?RmlmYSAyMgRml=hamann&nairu=/mountain/ZG93bmxvYWR8dUUyTm5WaU5YeDhNVFkxTnpBek5qSXlNM3g4TWpVM05IeDhLRTBwSUhKbFlXUXRZbXh2WnlCYlJtRnpkQ0JIUlU1ZA/holdouts
- https://kurditi.com/upload/files/2022/07/kNJvtN3OSOUWiBHczKrO_05_7ff7b908c43f79768ff6e8cafbdba0b6_file.pdf
- https://thehomeofheroes.org/fifa-22-crack-mega-pc-windows/
- https://ikcasino.com/2022/07/05/fifa-22-hacked-activation-key-free/
- https://alafdaljo.com/fifa-22-serial-number-for-windows/
- https://asiccareer.com/wp-content/uploads/2022/07/wilyar-1.pdf
- https://greatriverfamilypromise.org/fifa-22-crack-patch-free-download-win-mac-april-2022/
- http://dottoriitaliani.it/ultime-notizie/bellezza/fifa-22-keygen-with-product-key-download-march-2022/
- https://cromaz.com.br/upload/files/2022/07/THViHQb2jqHMUq2gC85l_05_0b3c9f7204ac680ff1b8bae8988bd3a6_file.pdf
- https://shalamonduke.com/fifa-22-key-generator/
- https://churchillcat.com/wp-content/uploads/2022/07/Fifa_22_HACK__.pdf
- http://chat.xumk.cn/upload/files/2022/07/7LlM17M41FC4R32jvfAP_05_0b3c9f7204ac680ff1b8bae8988bd3a6_file.pdf
- https://coetal.uog.edu.gy/sites/default/files/webform/ysaanno835.pdf
- https://firmateated.com/2022/07/05/fifa-22-hacked-with-keygen-2022/
- http://vietnam-tourism-travel.com/fifa-22-jb-keygen-exe-3264bit-2022/
- https://www.valenciacfacademyitaly.com/2022/07/05/fifa-22-keygen-only-serial-key-free-download-3264bit-latest-2022/
- https://silkfromvietnam.com/fifa-22-hacked-free-download/
- https://biomolecular-lab.it/fifa-22-2/
- https://greenboxoffice.ro/fifa-22-lifetime-activation-code-pc-windows/
- https://kurditi.com/upload/files/2022/07/kNJvtN3OSOUWiBHcz
- https://ikcasino.com/2022/07/05/fifa-22-hacked-activation-
- https://asiccareer.com/wp-
- https://greatriverfamilypromise.org/fifa-22-crack-patch-free-
- http://dottoriitaliani.it/ultime-notizie/bellezza/fifa-22-keygen-
- https://cromaz.com.br/upload/files/2022/07/THViHQb2jqHMU
- https://churchillcat.com/wp-
- http://chat.xumk.cn/upload/files/2022/07/7LlM17M41FC4R32j
- https://coetal.uog.edu.gy/sites/default/files/webform/ysaanno
- https://firmateated.com/2022/07/05/fifa-22-hacked-with-
- http://vietnam-tourism-travel.com/fifa-22-jb-keygen-
- https://www.valenciacfacademyitaly.com/2022/07/05/fifa-22-
- https://greenboxoffice.ro/fifa-22-lifetime-activation-code-pc-
- https://socialspace.ams3.digitaloceanspaces.com/upload/files/2022/07/aINQLxZGuYrj4ZMLpPjb_05_0b3c9f7204ac680ff1b8bae8988bd3a6_file.pdf
- https://wmich.edu/system/files/webform/Fifa-22_198.pdf
- http://www.tcpdf.org
- https://socialspace.ams3.digitaloceanspaces.com/upload/files
- http://www.w3.org/1999/02/22-rdf-syntax-ns#
- http://purl.org/dc/elements/1.1/
- http://ns.adobe.com/xap/1.0/
- http://ns.adobe.com/pdf/1.3/
- http://ns.adobe.com/xap/1.0/mm/
- http://www.aiim.org/pdfa/ns/extension/
- http://www.aiim.org/pdfa/ns/schema#
- http://www.aiim.org/pdfa/ns/property#
- http://www.aiim.org/pdfa/ns/id/
Open this report in the interactive analyzer, or submit your own file for analysis.