Malicious PDF — malware analysis report

Heuristics 4

• ClamAV: Pdf.Phishing.Trojan-d2568dad23a94d95-d2568dad23a94d95-10044375-0 critical CLAMAV_DETECTION
  ClamAV detected this file as malware: Pdf.Phishing.Trojan-d2568dad23a94d95-d2568dad23a94d95-10044375-0
• External URI info PDF_URI
  PDF contains an external URL action
• Object number defined twice with different bodies info PDF_DUPLICATE_OBJ_BODY_INCREMENTAL
  The same indirect object (N G) is defined more than once with different body bytes. First-wins and last-wins readers will resolve different content, which is a parser-confusion shape used by targeted PDFs. Body-only differences are common in benign incremental updates, so severity is raised only when the duplicate carries active content.
• Embedded URL info EMBEDDED_URL
  One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
  URL https://zajinet.ru/wb?keyword=y=mx+b%20word%20problems%20worksheet PDF link annotation

  • https://lewumime.weebly.com/uploads/1/3/5/2/135297270/2021498.pdfIn PDF document text
  • http://zelopaqq.xyz/86842468756g6qz7.pdfIn PDF document text
  • http://damvglaz2.xyz/aix_en_provence_mapzpk55.pdfIn PDF document text
  • http://persequenteamsohbet.com/chu_chu_tv_videos_freegou8p.pdfIn PDF document text
  • https://malitorenifavo.weebly.com/uploads/1/3/4/0/134017021/xiwulirawidoke.pdfIn PDF document text
  • http://fishland.store/definition_d_arrire-_plan_en_informatique3utqf.pdfIn PDF document text
  • https://kajabukege.weebly.com/uploads/1/3/1/3/131379037/39359c090e.pdfIn PDF document text
  • http://tegor.xyz/99094047080wyah8.pdfIn PDF document text
  • http://santaparker.store/565758433099o8ed.pdfIn PDF document text
  • http://zdsshop.top/bose_wave_radio_ii_remote_awr1b25dt3z.pdfIn PDF document text
  • http://gratoramaa.website/886098341171dm4e.pdfIn PDF document text
  • http://www.ascendercorp.com/In PDF document text
  • http://www.ascendercorp.com/typedesigners.htmlIn PDF document text
  • https://0bdb67af-4c57-4a6e-9706-714cc80719f5.filesusr.com/ugd/fc840b_fc882b7a384f4712876dadad8ffa4815.pdf?index=trueIn PDF document text
  • https://994180ce-385f-4272-9833-4a204a825e0f.filesusr.com/ugd/ec0c41_034f29ed5e1b400495a0eb3a5d0b4074.pdf?index=trueIn PDF document text
  • https://uploads.strikinglycdn.com/files/928ed6f3-9d8b-43df-99a0-5bd07c664c9f/30711879605.pdfIn PDF document text
  • https://uploads.strikinglycdn.com/files/bb9e4f02-e08c-4692-a920-39cc520030d1/rimigidofilaji.pdfIn PDF document text
  • https://uploads.strikinglycdn.com/files/995610ef-5e41-4f42-8398-d0f05f490698/fundamentals_of_logic_design_6th_edition.pdfIn PDF document text
  • https://uploads.strikinglycdn.com/files/9237d7c3-f668-4063-a56f-95d03a0334a9/how_do_small_business_pay_taxes.pdfIn PDF document text
  • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
  • http://purl.org/dc/elements/1.1/In PDF document text
  • http://ns.adobe.com/pdf/1.3/In PDF document text
  • http://ns.adobe.com/xap/1.0/In PDF document text
  • http://ns.adobe.com/xap/1.0/mm/In PDF document text
  • http://ns.adobe.com/xap/1.0/rights/In PDF document text
  • http://scripts.sil.org/OFLIn PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.