SUSPICIOUS
34
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
This PDF document contains multiple embedded URLs that advertise cracked software, indicating a lure for users to download potentially malicious applications. One of the embedded URIs, http://hardlyfind.com/..., appears to be a download link, suggesting the document's primary purpose is to facilitate the download of unwanted or malicious software. No scripts were extracted from this sample.
Machine Learning
- Nyx PDF Classifier clean score 0.0119
Heuristics 3
-
PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LUREPDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://hardlyfind.com/shahryar/botanist/ebookers&oldyweds=sieving.organically?ZG93bmxvYWR8Z3k0WlhReWQzeDhNVFkxTnpFNE5qazFOWHg4TWpVM05IeDhLRTBwSUhKbFlXUXRZbXh2WnlCYlJtRnpkQ0JIUlU1ZA=U3VuIFhWTSBWaXJ0dWFsQm94IDIuMS40IFg2NCAoNjQtYml0KSBEb3dubG9hZCBQYwU3V PDF link annotation
- https://malekrealty.org/patched-power-iso-5-6-final-keys-keyglz0-core-by-senzati-link/In PDF document text
- https://hopsishop.com/2022/07/08/uk2000-birmingham-extreme-crack-17-work/In PDF document text
- https://www.iltossicoindipendente.it/2022/07/08/easeus-data-recovery-wizard-9-8-0-technician-x32-x64multicrack-top/In PDF document text
- https://www.lavozmagazine.com/advert/steel-frame-marathi-book-pdf-high-quality/In PDF document text
- http://www.hva-concept.com/slavesswordbundlehack-extra-quality/In PDF document text
- https://www.theblender.it/nvidia-3dtv-play-para-mandar-contenido-3d-a-tu-tv/In PDF document text
- https://www.reperiohumancapital.com/system/files/webform/wonyam206.pdfIn PDF document text
- http://sourceofhealth.net/2022/07/08/bajrangibhaijaanenglishmoviefreedownload-best/In PDF document text
- https://studiolegalefiorucci.it/2022/07/08/tenorshare-4mekey-1-0-0-7-repack-crack-free-download/In PDF document text
- https://eqsport.biz/wp-content/uploads/2022/07/yordahe.pdfIn PDF document text
- https://www.cheddrbox.com/upload/files/2022/07/qEQxPZBN9i3oAgibznjM_08_dbeaa49c56ef6ae08787ff190b4ea355_file.pdfIn PDF document text
- https://vumview.com/upload/files/2022/07/kF2DyXkC2CES7DJo1TwY_08_a62aa1dc66c96a2512442db287e10c1e_file.pdfIn PDF document text
- https://koeglvertrieb.de/wp-content/uploads/2022/07/frivand-1.pdfIn PDF document text
- https://ebbsarrivals.com/2022/07/08/casper-nirvana-nb-15-6-wireless-driver-64-bit-comdirect-sinclair-r/In PDF document text
- https://www.slas.lk/advert/sabse-badhkar-hum-2-hindi-dubbed-khatrimaza-1080p-exclusive/In PDF document text
- http://eventaka.com/?p=28783In PDF document text
- https://www.legittimazione.it/wp-content/uploads/2022/07/AdobeAcrobat8ProfessionalwithKeygenfreedownload_Extra_Quality.pdfIn PDF document text
- https://trello.com/c/hC6Lxifx/51-hd-online-player-ice-age-scrat-no-time-for-nuts-1080p-linkIn PDF document text
- https://trello.com/c/nAzDAjej/145-download-anjaan-720p-hd-linkIn PDF document text
- https://trello.com/c/ozQf4rjK/45-la-moglie-degli-altri-salieri-exclusiveIn PDF document text
- http://www.tcpdf.orgIn PDF document text
- http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
- http://purl.org/dc/elements/1.1/In PDF document text
- http://ns.adobe.com/xap/1.0/In PDF document text
- http://ns.adobe.com/pdf/1.3/In PDF document text
- http://ns.adobe.com/xap/1.0/mm/In PDF document text
- http://www.aiim.org/pdfa/ns/extension/In PDF document text
- http://www.aiim.org/pdfa/ns/schema#In PDF document text
- http://www.aiim.org/pdfa/ns/property#In PDF document text
- http://www.aiim.org/pdfa/ns/id/In PDF document text
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
font_00_sfnt_off00001e4f.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x1E4F | 84508 bytes |
SHA-256: 2b7ba551bea82cc3307397981c1dbeb1b78486f95f2eb14e5e58d4e1b24edb0c |
|||
font_01_sfnt_off0000a63b.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xA63B | 83036 bytes |
SHA-256: 6d13e73e85a502a13969f6a5eaecd0b275a0868c045f80b7d64ed55d70678261 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.