SUSPICIOUS
34
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
T1204.002 Malicious Link
The PDF document contains multiple embedded URLs that advertise cracked software, specifically Adobe Photoshop. One heuristic indicates a 'PDF link farm' that advertises cracked/pirated software, with one example URL being http://wolontariusz.com/advert/adobe-photoshop-cc-2015-crack-file-only-win-mac/. Another heuristic identified an external URI pointing to http://mydrugdir.com/UGhvdG9zaG9wIDIwMjEgKFZlcnNpb24gMjIuNC4zKQUGh/ZG93bmxvYWR8TDcxTmpsaGRYeDhNVFkxTmprNE1UVXdOSHg4TWpVNU1IeDhLRTBwSUZkdmNtUndjbVZ6Y3lCYldFMU1VbEJESUZZeUlGQkVSbDA/francessco.habitant/obsessively.swamped. These findings suggest the document is designed to trick users into downloading potentially malicious software by posing as a source for cracked applications.
Machine Learning
- Nyx PDF Classifier clean score 0.0007
Heuristics 3
-
PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LUREPDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://mydrugdir.com/UGhvdG9zaG9wIDIwMjEgKFZlcnNpb24gMjIuNC4zKQUGh/ZG93bmxvYWR8TDcxTmpsaGRYeDhNVFkxTmprNE1UVXdOSHg4TWpVNU1IeDhLRTBwSUZkdmNtUndjbVZ6Y3lCYldFMU1VbEJESUZZeUlGQkVSbDA/francessco.habitant/obsessively.swamped PDF link annotation
- https://www.careerfirst.lk/sites/default/files/webform/cv/Adobe-Photoshop-2022-Version-231_14.pdfIn PDF document text
- https://favs.favelas.top/upload/files/2022/07/i6xgi4jnIDZXeFXcytoJ_05_9c9396458e852e3b456f20e796f7256d_file.pdfIn PDF document text
- https://www.7desideri.it/photoshop-cs5-serial-number-and-product-key-crack-free-download/In PDF document text
- https://zymlink.com/advert/photoshop-cc-2019-version-20-crack-full-version/In PDF document text
- https://shopblacktampabay.org/2022/07/04/photoshop-cc-2015-version-16-serial-key-for-windows/In PDF document text
- https://bonnethotelsurabaya.com/wp-content/uploads/Adobe_Photoshop_2021_Version_2201_serial_number_and_product_key_crack__Full_Product_Key_Wi.pdfIn PDF document text
- https://socialagora.xyz/upload/files/2022/07/6uSLFgZin5phIFzdxVci_05_9c9396458e852e3b456f20e796f7256d_file.pdfIn PDF document text
- https://www.beltbucklescustom.com.au/sites/www.beltbucklescustom.com.au/files/webform/Adobe-Photoshop-2022-Version-2311.pdfIn PDF document text
- https://duolife.academy/photoshop-2020-version-21-product-key-and-xforce-keygen-license-key-full/In PDF document text
- https://kjvreadersbible.com/photoshop-2022-version-23-0-1-free-download/In PDF document text
- https://sextransgressions.com/2022/07/05/adobe-photoshop-2021-version-22-2-incl-product-key-win-mac/In PDF document text
- https://scappy.bmde-labs.com/upload/files/2022/07/Qxeltq1ePGUlMD6KSKk8_05_9c9396458e852e3b456f20e796f7256d_file.pdfIn PDF document text
- https://attitude.ferttil.com/upload/files/2022/07/FjHkZ2luvlTTepaFiBAh_05_9c9396458e852e3b456f20e796f7256d_file.pdfIn PDF document text
- https://www.methanex.com/sites/default/files/responsible-care/MethanexIn PDF document text
- https://csermooc78next.blog/2022/07/05/adobe-photoshop-2022-version-23-1-1-product-key-and-xforce-keygen-with-product-key-win-mac-updated-2022/In PDF document text
- https://stellarismods.com/wp-content/uploads/2022/07/geomar.pdfIn PDF document text
- http://wolontariusz.com/advert/adobe-photoshop-cc-2015-crack-file-only-win-mac/In PDF document text
- https://thecryptobee.com/adobe-photoshop-cs6-keygenerator-activation-key-mac-win/In PDF document text
- https://ayusya.in/adobe-photoshop-2021-version-22-0-1-hacked-mac-win/In PDF document text
- https://www.templetonma.gov/sites/g/files/vyhlif3911/f/file/file/phone-contact_list_for_all_offices.pdfIn PDF document text
- https://used-gensets.com/advert/adobe-photoshop-2021-version-22-5-1-keygen-crack-serial-key-with-product-key-pc-windows/In PDF document text
- https://ebbsarrivals.com/2022/07/05/adobe-photoshop-2021-version-22-3-1-serial-number-full-torrent-pc-windows/In PDF document text
- https://u-ssr.com/upload/files/2022/07/imt53piJWkPEvWKLePGn_05_181ba991792cac4836727714372f2ae4_file.pdfIn PDF document text
- https://www.batiksukses.com/photoshop-cc-activation-with-license-key-download-updated/In PDF document text
- https://maisonrangee.com/wp-content/uploads/2022/07/Photoshop_2020_Serial_Key.pdfIn PDF document text
- https://alafdaljo.com/photoshop-cc-2018-version-19-keygen-crack-setup-activator-pc-windows-updated-2022/In PDF document text
- https://favs.favelas.top/upload/files/2022/07/i6xgi4jnIDZXeFXcytoJ_05_9c9396458e852e3b456f20e796f7256d_filIn PDF document text
- https://bonnethotelsurabaya.com/wp-content/uploads/Adobe_Photoshop_2021_Version_2201_serial_number_andIn PDF document text
- https://socialagora.xyz/upload/files/2022/07/6uSLFgZin5phIFzdxVci_05_9c9396458e852e3b456f20e796f7256d_fiIn PDF document text
- https://www.beltbucklescustom.com.au/sites/www.beltbucklescustom.com.au/files/webform/Adobe-In PDF document text
- https://scappy.bmde-In PDF document text
- https://attitude.ferttil.com/upload/files/2022/07/FjHkZ2luvlTTepaFiBAh_05_9c9396458e852e3b456f20e796f7256In PDF document text
- https://csermooc78next.blog/2022/07/05/adobe-photoshop-2022-version-23-1-1-product-key-and-xforce-keygen-In PDF document text
- https://used-gensets.com/advert/adobe-photoshop-2021-version-22-5-1-keygen-crack-serial-key-with-product-In PDF document text
- https://ebbsarrivals.com/2022/07/05/adobe-photoshop-2021-version-22-3-1-serial-number-full-torrent-pc-In PDF document text
- https://www.adb.org/system/files/webform/202207/inquiries/Photoshop-2022-Version-2341.pdfIn PDF document text
- https://trello.com/c/DxpwKHei/75-photoshop-2022-version-2302-keygen-crack-setup-latestIn PDF document text
- https://wakelet.com/wake/Evckn89a8-5_NSve9re1BIn PDF document text
- https://wakelet.com/wake/RiTDxpRy5z8LiQmvDR2XXIn PDF document text
- http://www.tcpdf.orgIn PDF document text
- http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
- http://purl.org/dc/elements/1.1/In PDF document text
- http://ns.adobe.com/xap/1.0/In PDF document text
- http://ns.adobe.com/pdf/1.3/In PDF document text
- http://ns.adobe.com/xap/1.0/mm/In PDF document text
- http://www.aiim.org/pdfa/ns/extension/In PDF document text
- http://www.aiim.org/pdfa/ns/schema#In PDF document text
- http://www.aiim.org/pdfa/ns/property#In PDF document text
- http://www.aiim.org/pdfa/ns/id/In PDF document text
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
font_00_sfnt_off000034dd.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x34DD | 84508 bytes |
SHA-256: 2b7ba551bea82cc3307397981c1dbeb1b78486f95f2eb14e5e58d4e1b24edb0c |
|||
font_01_sfnt_off0000bcc9.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xBCC9 | 83036 bytes |
SHA-256: 6d13e73e85a502a13969f6a5eaecd0b275a0868c045f80b7d64ed55d70678261 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.