Malicious PDF — malware analysis report

Heuristics 3

• Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
  Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
• External URI info PDF_URI
  PDF contains an external URL action
• Embedded URL info EMBEDDED_URL
  One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
  URL http://emailgoal.com/bryggja/VGFjdGljYWwgR2FsYWN0aWNhbAVGF/coleus.refluxing.entranced.forclosure/ZG93bmxvYWR8NGR3WlhGbE5IeDhNVFkxT0RJeU1EZzJObng4TWpVNU1IeDhLRTBwSUZkdmNtUndjbVZ6Y3lCYldFMU1VbEJESUZZeUlGQkVSbDA/guip/hone/ PDF link annotation

  • https://sarahebott.org/wp-content/uploads/2022/07/Fantasy_Grounds__The_Lightless_Beacon.pdfIn PDF document text
  • https://dortaltiyasdunyasi.com/wp-content/uploads/2022/07/Mayor_of_Defense.pdfIn PDF document text
  • https://www.fidelacademy.com/wp-content/uploads/2022/07/alaman.pdfIn PDF document text
  • https://ctago.org/the-crown-of-leaves-activation-free-3264bit-updated-2022/In PDF document text
  • https://www.fairlabels.net/climatic-survival-northern-storm-full-license-with-product-key-3264bit-2022/In PDF document text
  • https://the-chef.co/dalruan-world-of-magic-cheat-code-full-product-key-x64/In PDF document text
  • https://discountshoretours.com/wp-content/uploads/2022/07/dalcah.pdfIn PDF document text
  • http://fede-percu.fr/?p=In PDF document text
  • https://maltymart.com/advert/x4-split-vendetta-hacked-activation-download-april-2022/In PDF document text
  • https://insenergias.org/wp-content/uploads/2022/07/Fantasy_Grounds__Sherwood_The_Legend_Of_Robin_Hood_Trainer_Activation_Free_MacWin.pdfIn PDF document text
  • https://www.travelmindsets.com/genesis-of-drones-cheat-code-2022/In PDF document text
  • https://autocracymachinery.com/wp-content/uploads/2022/07/Frontier_VR.pdfIn PDF document text
  • http://barrillos.org/2022/07/20/blood-and-gold-��-the-zombiest-adventures-cheat-code-3264bit/In PDF document text
  • https://www.arredocasabari.it/wp-content/uploads/2022/07/malmich.pdfIn PDF document text
  • https://calcvr.org/wp-content/uploads/2022/07/Arvale_Cheat_Code_For_Windows.pdfIn PDF document text
  • https://www.cooks.am/wp-content/uploads/2022/07/daismand.pdfIn PDF document text
  • https://zeroimpact-event.com/wp-content/uploads/2022/07/Santa_Girls__Soundtrack_Patch_full_version__Free.pdfIn PDF document text
  • http://greatriverfamilypromise.org/?p=12779In PDF document text
  • https://realtowers.com/wp-content/uploads/2022/07/layonta.pdfIn PDF document text
  • https://www.georgiacannabis.org/wp-content/uploads/2022/07/The_Great_Art_Heist_Cheat_Code_Torrent_Free_Download_For_PC_Updated2022.pdfIn PDF document text
  • http://www.tcpdf.orgIn PDF document text
  • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
  • http://purl.org/dc/elements/1.1/In PDF document text
  • http://ns.adobe.com/xap/1.0/In PDF document text
  • http://ns.adobe.com/pdf/1.3/In PDF document text
  • http://ns.adobe.com/xap/1.0/mm/In PDF document text
  • http://www.aiim.org/pdfa/ns/extension/In PDF document text
  • http://www.aiim.org/pdfa/ns/schema#In PDF document text
  • http://www.aiim.org/pdfa/ns/property#In PDF document text
  • http://www.aiim.org/pdfa/ns/id/In PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.