MALICIOUS
64
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
T1059.001 PowerShell
T1204.002 Malicious Link
The PDF file contains a large number of embedded external links, identified by the PDF_SEO_LINK_FARM heuristic. One of these links, http://siteslocate.com/callcoot/herniations.isoflavins?obiviously=trachomatis&volkswagens=perturbation&RGlzbmV5IEVwaWMgTWlja2V5IDI6IFRoZSBQb3dlciBPZiBUd28gU2VyaWFsIEtleQRGl=ZG93bmxvYWR8S3UxTTI4eE5ueDhNVFkxTnpBMk56RTFOSHg4TWpVM05IeDhLRTBwSUhKbFlXUXRZbXh2WnlCYlJtRnpkQ0JIUlU1ZA, is flagged as suspicious. This suggests the document is designed to redirect users to potentially malicious websites, possibly for phishing or malware distribution.
Machine Learning
- Nyx PDF Classifier clean score 0.0245
Heuristics 3
-
Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARMSmall PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://siteslocate.com/callcoot/herniations.isoflavins?obiviously=trachomatis&volkswagens=perturbation&RGlzbmV5IEVwaWMgTWlja2V5IDI6IFRoZSBQb3dlciBPZiBUd28gU2VyaWFsIEtleQRGl=ZG93bmxvYWR8S3UxTTI4eE5ueDhNVFkxTnpBMk56RTFOSHg4TWpVM05IeDhLRTBwSUhKbFlXUXRZbXh2WnlCYlJtRnpkQ0JIUlU1ZA
- https://vascularhealthgroup.com.au/sites/default/files/webform/managerial-accounting-asia-global-edition-2e-pdf-159.pdf
- https://www.coursesuggest.com/wp-content/uploads/2022/07/xerand.pdf
- https://patroll.cl/wp-content/uploads/2022/07/IpswitchWhatsUpGoldPremiumv11InclKeymaker.pdf
- https://firmy.radom.pl/advert/wifly-city-idu-2850ug-56g-driver-download-203https-scoutmails-com-index301-php-k-wifly-city-idu-28-__hot__/
- http://www.terrainsprives.com/wp-content/uploads/2022/07/service_manual_einhell_ste_850.pdf
- https://fumostoppista.com/o2mania-english-1-4-2-hot/
- http://shop.chatredanesh.ir/?p=54402
- https://companionshipdirectory.com/advert/download-android-5-1-1-lollipop-ota-zip-file-to-your-computer-portable/
- https://cromaz.com.br/upload/files/2022/07/H6GqS3U4JipR6dbplv5B_06_a44380eaca497d1244e2fd4b5296a4a7_file.pdf
- https://yahwehslove.org/houseflipperbetahacktorrent/
- https://kjvreadersbible.com/recool-swf-to-video-converter-crack-hot/
- http://www.theoldgeneralstorehwy27.com/adobe-premiere-pro-cc-7-2-2-crack-password-link/
- https://fraenkische-rezepte.com/discografia-massimo-di-cataldo-download-bittorrent-new/
- https://www.shopizzo.com/wp-content/uploads/2022/07/wilmfyl.pdf
- https://www.arunachalreflector.com/2022/07/06/angry-indian-goddesses-2015-movie-kickass-_best_-download/
- https://trello.com/c/20IKc7yQ/63-paretologic-data-recovery-pro-11-license-key-hot
- https://americap2.nyc3.digitaloceanspaces.com/upload/files/2022/07/3Lb5CjZ1NSVoYxolGkrX_06_f782c9729cb56cdae8af9c4531aff2ce_file.pdf
- https://fd.lisboa.ucp.pt/pt-pt/system/files/webform/business-tour-board-game-with-online-multiplayer-download-pc-games-88.pdf
- https://7smabu2.s3.amazonaws.com/upload/files/2022/07/JK6mfUEijmajNDuj3KSF_06_28f9772caa0120b06235a138775ab4d2_file.pdf
- https://wmich.edu/system/files/webform/softvision-explorer-manager-4-keygen-11.pdf
- http://www.tcpdf.org
- http://www.w3.org/1999/02/22-rdf-syntax-ns#
- http://purl.org/dc/elements/1.1/
- http://ns.adobe.com/xap/1.0/
- http://ns.adobe.com/pdf/1.3/
- http://ns.adobe.com/xap/1.0/mm/
- http://www.aiim.org/pdfa/ns/extension/
- http://www.aiim.org/pdfa/ns/schema#
- http://www.aiim.org/pdfa/ns/property#
- http://www.aiim.org/pdfa/ns/id/
Open this report in the interactive analyzer, or submit your own file for analysis.