Malicious PDF — malware analysis report

Heuristics 4

• Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
  Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
• Cracked-software lure uses shortlink/download gateway critical PDF_CRACKED_SOFTWARE_SHORTLINK_LURE
  PDF visible text advertises a crack, serial number, archive, or pirated-software download and pairs it with a shortlink or encoded download gateway. This is a high-confidence social-engineering carrier for unwanted software or droppers; the PDF itself is not a parser exploit.
• External URI info PDF_URI
  PDF contains an external URL action
• Embedded URL info EMBEDDED_URL
  One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
  URL http://hardlyfind.com/pushing.tasers.hennum/RmFjaWFsIEFidXNlIDA2MjAxMCBNYXlsaSAxMDgwcHdtdiAxMQRmF.crakling.ZG93bmxvYWR8YnAzTVRjMU4zeDhNVFkyT1RnMk1qSTRObng4TWpVNU1IeDhLRTBwSUZkdmNtUndjbVZ6Y3lCYldFMU1VbEJESUZZeUlGQkVSbDA PDF link annotation

  • https://www.qmajd.com/wp-content/uploads/2022/12/miceldw.pdfIn PDF document text
  • https://carolinmparadis.com/wp-content/uploads/2022/12/eleecha.pdfIn PDF document text
  • https://rerummea.com/wp-content/uploads/2022/12/Buod_Ng_Kwentong_Sandaang_Damit_Akda_Ni_Fanny_R_Garcia.pdfIn PDF document text
  • https://arlingtonliquorpackagestore.com/wp-content/uploads/2022/12/shadbevl.pdfIn PDF document text
  • https://studentloanreliefllc.com/wp-content/uploads/2022/12/partiturasmisasinodalpalazon.pdfIn PDF document text
  • https://www.proindustria.net/wp-content/uploads/2022/12/utorrent_movie_download_telugu_The_Attacks_Of_26_11.pdfIn PDF document text
  • https://www.netcolf.it/wp-content/uploads/2022/12/THE_Mumbai_Police_MOVIE_TORRENT.pdfIn PDF document text
  • http://www.studiofratini.com/extra-quality-download-film-horor-indonesia-hantu-tanah-kusir/In PDF document text
  • http://www.studiofratini.com/hdd-regenerator-2011-incl-crack-tordigger-better/In PDF document text
  • https://joyfuljourneyresources.net/wp-content/uploads/2022/12/Armin_Van_Buuren_10_Years_Zippy.pdfIn PDF document text
  • https://rerummea.com/wp-content/uploads/2022/12/Buod_Ng_Kwentong_Sandaang_DamitIn PDF document text
  • https://studentloanreliefllc.com/wp-content/uploads/2022/12/partiturasmisasinodalpalazoIn PDF document text
  • https://www.proindustria.net/wp-content/uploads/2022/12/utorrent_movie_download_teluIn PDF document text
  • https://www.netcolf.it/wp-content/uploads/2022/12/THE_Mumbai_Police_MOVIE_TORREIn PDF document text
  • http://www.studiofratini.com/extra-quality-download-film-horor-indonesia-hantu-tanah-kuIn PDF document text
  • https://joyfuljourneyresources.net/wp-content/uploads/2022/12/Armin_Van_Buuren_10_YeIn PDF document text
  • http://hardlyfind.com/pushing.tasers.hennum/rmfjawfsiefidxnlida2mjaxmcbnyxlsasaxmdgwchdtdiaxmqrmf.crakling.zg93bmxvywr8ynaztvrjmu4zedhnvfkyt1rnmk1qstrobng4twpvnu1iedhlrtbwsuzkdmntundjbvz6y3lcyldfmu1vbejesuzzeulgqkvsbdaIn PDF document text
  • http://dejavu.sourceforge.netIn extracted file (stream_004_off00002bf9.bin)
  • http://dejavu.sourceforge.net/wiki/index.php/LicenseIn extracted file (stream_004_off00002bf9.bin)

Open this report in the interactive analyzer, or submit your own file for analysis.