SUSPICIOUS
34
Risk Score
Malware Insights
MITRE ATT&CK
T1059.001 PowerShell
T1204.002 Malicious File
The PDF document contains heuristics indicating it advertises cracked software and includes external URIs. One of the primary URIs, 'http://godsearchs.com/crashing.encasings?...', appears to be a download link for a potentially malicious file. The document body is heavily obfuscated and does not provide clear textual lures, but the presence of cracked software links strongly suggests a social engineering attack to trick users into downloading malware.
Machine Learning
- Nyx PDF Classifier clean score 0.0233
Heuristics 3
-
PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LUREPDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://godsearchs.com/crashing.encasings?hoafat=/VWtleVNvZnQgRm9uZUVyYXNlciBSZXZpZXc6IDEwMCUgRXJhc2UgQWxsIGlPUyBEYXRhIGJlZm9yZSBTZWxsaW5nIFlvdXIgaVBob25lIGlQYWQgaVBvZAVWt/birthtime/ZG93bmxvYWR8alQ1TVhWM2RIeDhNVFkxTnpBMk56RTFOSHg4TWpVM05IeDhLRTBwSUhKbFlXUXRZbXh2WnlCYlJtRnpkQ0JIUlU1ZA/ispahan/newberry.notepads PDF link annotation
- https://bluesteel.ie/2022/07/06/livejasmin-credits-hack-v4-0-rar/In PDF document text
- https://landings.org/system/files/webform/8Dio--Legacy-1928-Steinway-Piano-Kontakt-free-download.pdfIn PDF document text
- https://test.gopa-infra.de/sites/default/files/webform/almnoe601.pdfIn PDF document text
- https://www.investbank.jo/sites/default/files/webform/kaffant66.pdfIn PDF document text
- https://cambodiaonlinemarket.com/revo-uninstaller-pro-4-2-0-patch/In PDF document text
- https://www.suvcars.com/advert/kunci-jawaban-auditing-dan-jasa-assurance-jilid-2-arens-rapidshare/In PDF document text
- https://datingmarriagehub.com/wp-content/uploads/2022/07/HAL7600_v12_Win7_Activator.pdfIn PDF document text
- https://fernrocklms.com/blog/index.php?entryid=5479In PDF document text
- https://www.plori-sifnos.gr/accelrys-material-studio-6-0-crack-better/In PDF document text
- https://www.brookfield.k12.ct.us/sites/g/files/vyhlif4196/f/pages/advocacy_letter_from_brookfield_public_schools.pdfIn PDF document text
- https://nutacademia.com/wp-content/uploads/2022/07/verldei.pdfIn PDF document text
- http://feelingshy.com/easyplc-simulador-full-mega-new/In PDF document text
- http://mysquare.in/?p=43619In PDF document text
- https://dogrywka.pl/wp-content/uploads/2022/07/luciand.pdfIn PDF document text
- https://educa.neurolabbo.com/blog/index.php?entryid=6195In PDF document text
- http://www.dagerardo.ch/3d-max-2013-free-download-best-with-crack/In PDF document text
- https://hoboshuukan.com/zlatno-runo-pekic-pdf-download-top/In PDF document text
- https://www.rosesebastian.com/2022/07/06/kasey-and-october-lolly-sports-torrent/In PDF document text
- https://kuudle.com/kamasutra-book-in-malayalam-with-photo-pdf-_hot_-free-43/In PDF document text
- https://landings.org/system/files/webform/8Dio--Legacy-1928-Steinway-Piano-Kontakt-free-In PDF document text
- https://www.suvcars.com/advert/kunci-jawaban-auditing-dan-jasa-assurance-jilid-2-arens-In PDF document text
- https://www.brookfield.k12.ct.us/sites/g/files/vyhlif4196/f/pages/advocacy_letter_from_brookfield_puIn PDF document text
- https://trello.com/c/o551kl9I/58-hd-online-player-bhaji-in-problem-marathi-movie-downlIn PDF document text
- http://www.tcpdf.orgIn PDF document text
- http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
- http://purl.org/dc/elements/1.1/In PDF document text
- http://ns.adobe.com/xap/1.0/In PDF document text
- http://ns.adobe.com/pdf/1.3/In PDF document text
- http://ns.adobe.com/xap/1.0/mm/In PDF document text
- http://www.aiim.org/pdfa/ns/extension/In PDF document text
- http://www.aiim.org/pdfa/ns/schema#In PDF document text
- http://www.aiim.org/pdfa/ns/property#In PDF document text
- http://www.aiim.org/pdfa/ns/id/In PDF document text
Open this report in the interactive analyzer, or submit your own file for analysis.