MALICIOUS
64
Risk Score
Machine Learning
- Nyx PDF Classifier clean score 0.0021
Heuristics 3
-
Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARMSmall PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://signforcover.com/abusing/cartel.hematogenously?ZG93bmxvYWR8Q1o3WmpOa2ZId3hOamN4TWpFNU1EazNmSHd5TlRrd2ZId29UU2tnVjI5eVpIQnlaWE56SUZ0WVRVeFNVRU1nVmpJZ1VFUkdYUQ=discovered/QXV0b0NBRAQXV/robbers PDF link annotation
- https://sawerigading-news.com/2022/12/17/��������������-��������������-������������������-��������������-����/In PDF document text
- http://www.midax.it/registrazione-utenti/In PDF document text
- https://thesmokymtnlife.com/wp-content/uploads/2022/12/AutoCAD-2023.pdfIn PDF document text
- https://slab-bit.com/autocad-��������������-������-����-hot/In PDF document text
- https://orbeeari.com/autodesk-autocad-��������������-��-����������������-����������������������-����/In PDF document text
- https://towntexas.com/wp-content/uploads/2022/12/saichri.pdfIn PDF document text
- https://ayusya.in/wp-content/uploads/Autodesk-AutoCAD-WinMac-X64-2022.pdfIn PDF document text
- https://ojse.org/wp-content/uploads/2022/12/golgael.pdfIn PDF document text
- https://firstlady-realestate.com/2022/12/16/��������������-autodesk-autocad-��������������������-������������������������/In PDF document text
- https://skepticsguild.com/wp-content/uploads/2022/12/capwill.pdfIn PDF document text
- http://www.reiten-scheickgut.at/wp-content/uploads/2022/12/Xforce-Keygen-Autocad-2013-64-Bit-EXCLUSIVE.pdfIn PDF document text
- https://www.club-devigo.fr/wp-content/uploads/arnochal.pdfIn PDF document text
- https://bustedrudder.com/advert/%d1%81%d0%ba%d0%b0%d1%87%d0%b0%d1%82%d1%8c-autodesk-autocad-%d1%81-%d0%ba%d0%bb%d1%8e%d1%87%d0%be%d0%bc-%d0%bf%d1%80%d0%be%d0%b4%d1%83%d0%ba%d1%82%d0%b0-%d0%be%d0%b1%d0%bd%d0%be%d0%b2%d0%bb%d0%b5/In PDF document text
- https://www.pedomanindonesia.com/advert/autocad-%d1%83%d1%81%d1%82%d0%b0%d0%bd%d0%be%d0%b2%d0%be%d1%87%d0%bd%d1%8b%d0%b9-%d1%81%d0%ba%d0%b0%d1%87%d0%b0%d1%82%d1%8c-better/In PDF document text
- https://dominateyournichenow.com/��������������-��������������-������������������-2015-top/In PDF document text
- https://www.cooks.am/wp-content/uploads/2022/12/desmgar.pdfIn PDF document text
- https://teenmemorywall.com/autodesk-autocad-��������������-������������������-hacked-x64-2022/In PDF document text
- https://www.picturestoheaven.com/wp-content/uploads/2022/12/AutoCAD-5.pdfIn PDF document text
- https://homeworks.ng/wp-content/uploads/2022/12/velesay.pdfIn PDF document text
- https://kitarafc.com/wp-content/uploads/2022/12/gerjoh.pdfIn PDF document text
- http://www.reiten-scheickgut.at/wp-content/uploads/2022/12/Xforce-Keygen-Autocad-2013-64-Bit-EXIn PDF document text
- https://bustedrudder.com/advert/%d1%81%d0%ba%d0%b0%d1%87%d0%b0%d1%82%d1%8c-autodIn PDF document text
- https://www.pedomanindonesia.com/advert/autocad-%d1%83%d1%81%d1%82%d0%b0%d0%bd%d0In PDF document text
- http://dejavu.sourceforge.netFontsIn extracted file (font_02_sfnt_off0000e763.bin)
- https://techplanet.today/post/descarga-gratis-autocad-2017-210-clave-de-producto-agrietado-for-windows-2023In PDF document text
- https://techplanet.today/post/descarga-gratis-autocad-2017-210-clave-de-producto-agrietado-for-winIn PDF document text
- http://dejavu.sourceforge.netIn extracted file (stream_007_off00006906.bin)
- http://dejavu.sourceforge.net/wiki/index.php/LicenseIn extracted file (stream_007_off00006906.bin)
- http://dejavu.sourceforge.net/wiki/index.php/LicenseDejaVuIn extracted file (font_02_sfnt_off0000e763.bin)
🗂 Part of campaign:
secureserver.net
1471 samples
Extracted artifacts 3
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_007_off00006906.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x6906 | 24280 bytes |
SHA-256: 4ab01ced01c4588c022cbe7e24d9f2c0f6b993632d27ef4d57bc1208b0da05f5 |
|||
font_01_sfnt_off0000aa6e.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xAA6E | 22748 bytes |
SHA-256: 40470b39f68b55d81ceafef3f41fede4bc6d0697c24ede7699130928fffa2e9d |
|||
font_02_sfnt_off0000e763.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xE763 | 27260 bytes |
SHA-256: f1c700c582fc9280cbb51bdc36f9189110c6be0afdaa2cf34e3aff447e097f62 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.