SUSPICIOUS
34
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
T1059.001 PowerShell
The PDF contains heuristics indicating it advertises cracked software and includes external URIs. One of the primary URLs, http://signforcover.com/ferrysburg/sauber/cloudy/frugally/QWxjYXRlY2ggQlBNIFN0dWRpbyA0LjkuMSBTa2lucyBDcmFjawQWx.ZG93bmxvYWR8amc5WjIxcU9IeDhNVFkxTnpBMk56RTFOSHg4TWpVM05IeDhLRTBwSUhKbFlXUXRZbXh2WnlCYlJtRnpkQ0JIUlU1ZA..jair, appears to be a base64 encoded string that likely leads to a malicious download. The document body is heavily obfuscated and does not provide clear textual lures.
Machine Learning
- Nyx PDF Classifier clean score 0.0169
Heuristics 3
-
PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LUREPDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://signforcover.com/ferrysburg/sauber/cloudy/frugally/QWxjYXRlY2ggQlBNIFN0dWRpbyA0LjkuMSBTa2lucyBDcmFjawQWx.ZG93bmxvYWR8amc5WjIxcU9IeDhNVFkxTnpBMk56RTFOSHg4TWpVM05IeDhLRTBwSUhKbFlXUXRZbXh2WnlCYlJtRnpkQ0JIUlU1ZA..jair PDF link annotation
- https://anarecuero.org/wp-content/uploads/2022/07/quytalb-1.pdfIn PDF document text
- http://findmallorca.com/speedupmypc-3-5-cracked-serial-maz-serial-key-link/In PDF document text
- https://germanconcept.com/hoja-de-anotacion-de-voleibol-pdf-19/In PDF document text
- https://www.neteduproject.org/wp-content/uploads/Autodesk_Xforce_2011_Keygen_16.pdfIn PDF document text
- http://antiquesanddecor.org/?p=29676In PDF document text
- http://launchimp.com/ephere-ornatrix-6-2-0-19732-for-3ds-max-win-x64-top/In PDF document text
- https://amnar.ro/bm-bot-seafight-download-new-full/In PDF document text
- https://mamawong.de/ulead-cool-3d-production-studio-3-5-free-download-crack-22-top/In PDF document text
- https://www.theblender.it/__hot__-download-krantiveer-1994-dvdrip-720p-x264-51-manudil-silverrg-torrent-kickasstorrents/In PDF document text
- https://www.cameraitacina.com/en/system/files/webform/feedback/meegjavo166.pdfIn PDF document text
- https://www.nbschools.org/sites/g/files/vyhlif4791/f/uploads/v2_kindergarten_letter_2022-2023_2.pdfIn PDF document text
- https://delcohempco.com/2022/07/06/telecharger-man-sayarbah-al-million-jeux-arabe-link/In PDF document text
- http://www.gambians.fi/pack-kit-package-design-modo-501-download-free-new-3/healthy-diet/In PDF document text
- https://www.realvalueproducts.com/sites/realvalueproducts.com/files/webform/aobfin179.pdfIn PDF document text
- https://centraldomarketing.com/1st-studio-siberian-mouses-hd-masha-masha-and-girlfriends-wmv-__exclusive__-2/In PDF document text
- https://influencerstech.com/upload/files/2022/07/9jfJtXKbhGhdOdUImWRE_06_16adcffb4a51b378828508d56497f16c_file.pdfIn PDF document text
- https://www.cameraitacina.com/en/system/files/webform/feedback/wwe-raw-ultimate-impact-2013-pc-game-torrent-download.pdfIn PDF document text
- https://tread-softly.com/ak47-cfg-download-verified/In PDF document text
- https://wakelet.com/wake/BOVQPlvHeOVNwDLtnP60iIn PDF document text
- http://urcurcont.yolasite.com/resources/Cnc-Keller-Symplus-51-Torrent-HOT.pdfIn PDF document text
- http://www.tcpdf.orgIn PDF document text
- http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
- http://purl.org/dc/elements/1.1/In PDF document text
- http://ns.adobe.com/xap/1.0/In PDF document text
- http://ns.adobe.com/pdf/1.3/In PDF document text
- http://ns.adobe.com/xap/1.0/mm/In PDF document text
- http://www.aiim.org/pdfa/ns/extension/In PDF document text
- http://www.aiim.org/pdfa/ns/schema#In PDF document text
- http://www.aiim.org/pdfa/ns/property#In PDF document text
- http://www.aiim.org/pdfa/ns/id/In PDF document text
Open this report in the interactive analyzer, or submit your own file for analysis.