MALICIOUS
74
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
T1203 Exploitation for Client Execution
The PDF document contains heuristics indicating it is a lure for installing browser extensions or updates, a common tactic for credential theft or malware delivery. It also advertises cracked software, further supporting a malicious intent. While no scripts were extracted, the embedded URLs suggest potential download locations for malicious payloads.
Machine Learning
- Nyx PDF Classifier clean score 0.0048
Heuristics 4
-
Browser extension / update installation lure high SE_BROWSER_INSTALL_LUREDocument tells the user to install a browser extension, plugin, viewer, or browser update to view content — a common social-engineering path for credential theft and malware installation
-
PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LUREPDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://findinform.com/TG9jayAwMzk7biBMb2FkIFNvdW5kcGFjawTG9/ZG93bmxvYWR8Q0Q3T1ROdGNYeDhNVFkxTmpnNU1qTTFNbng4TWpVM05IeDhLRTBwSUhKbFlXUXRZbXh2WnlCYlJtRnpkQ0JIUlU1ZA?academy=sauerbeck/androgens/binged&chaperones=denko PDF link annotation
- https://wanaly.com/upload/files/2022/07/VFbIfT3K7Y5s8isrB45Y_04_d312cf63b8023e9f78cdad2b3a38751e_file.pdfIn PDF document text
- https://4c70.com/wp-content/uploads/2022/07/ChatNow__Crack___Product_Key_Download.pdfIn PDF document text
- https://sbrelo.com/upload/files/2022/07/lfqlHHKL5oZ96yh9oN9e_04_d312cf63b8023e9f78cdad2b3a38751e_file.pdfIn PDF document text
- https://mykingdomtoken.com/upload/files/2022/07/5hPi7VZj3w9H7o9hjk8R_04_d312cf63b8023e9f78cdad2b3a38751e_file.pdfIn PDF document text
- https://vdsproductions.nl/decimort2-5196-crack/In PDF document text
- https://innovacioncosmetica.com/hslab-security-tracker-tses-4-0-516-2011-crack-incl-product-key-download-pc-windows/In PDF document text
- https://social.urgclub.com/upload/files/2022/07/Eg6B3GMGb9VE6iuFEz7b_04_d312cf63b8023e9f78cdad2b3a38751e_file.pdfIn PDF document text
- http://www.magneetclub.nl/wp-content/uploads/2022/07/Efham_internet_booster.pdfIn PDF document text
- https://threepatrons.org/news/filebadger-crack-patch-with-serial-key-free-for-windows-2022/In PDF document text
- https://www.reperiohumancapital.com/system/files/webform/MicroDEM.pdfIn PDF document text
- http://steamworksedmonton.com/10-band-crack-updated/In PDF document text
- https://artienz.com/upload/files/2022/07/k2rTpocu9HQYSzh6EOih_04_d312cf63b8023e9f78cdad2b3a38751e_file.pdfIn PDF document text
- https://www.easyblogging.in/wp-content/uploads/2022/07/ylaolwi.pdfIn PDF document text
- https://landings.org/sites/default/files/webform/Yahoo-My-Headlines.pdfIn PDF document text
- https://www.ygeiologia.gr/advert/photo-editor-crack-winmac-april-2022/In PDF document text
- https://arlingtonliquorpackagestore.com/flexbuild-for-windows-final-2022/In PDF document text
- http://www.b3llaphotographyblog.com/feedly-for-firefox-4-93-crack-free-download-updated-2022/In PDF document text
- https://my.youngfarmers.co.nz/system/files/webform/jarkamm512.pdfIn PDF document text
- https://wanaly.com/upload/files/2022/07/VFbIfT3K7Y5s8isrB45Y_04_d312cf63b8023e9f78cdIn PDF document text
- https://4c70.com/wp-In PDF document text
- https://sbrelo.com/upload/files/2022/07/lfqlHHKL5oZ96yh9oN9e_04_d312cf63b8023e9f78cdIn PDF document text
- https://mykingdomtoken.com/upload/files/2022/07/5hPi7VZj3w9H7o9hjk8R_04_d312cf63b8In PDF document text
- https://innovacioncosmetica.com/hslab-security-tracker-tses-4-0-516-2011-crack-incl-In PDF document text
- https://social.urgclub.com/upload/files/2022/07/Eg6B3GMGb9VE6iuFEz7b_04_d312cf63b802In PDF document text
- https://artienz.com/upload/files/2022/07/k2rTpocu9HQYSzh6EOih_04_d312cf63b8023e9f78cIn PDF document text
- http://www.b3llaphotographyblog.com/feedly-for-firefox-4-93-crack-free-download-In PDF document text
- http://bluthlinmi.yolasite.com/resources/Microsoft-Exchange-Server-2013-Management-Pack-Crack-Free-Download.pdfIn PDF document text
- https://socialstudentb.s3.amazonaws.com/upload/files/2022/07/Ip1rHFbWy45tlLePN29a_04_57ea0a8463ccf43a4c5ff1825ee6ef98_file.pdfIn PDF document text
- http://www.tcpdf.orgIn PDF document text
- http://bluthlinmi.yolasite.com/resources/Microsoft-Exchange-Server-2013-Management-Pack-In PDF document text
- https://socialstudentb.s3.amazonaws.com/upload/files/2022/07/Ip1rHFbWy45tlLePN29a_04_In PDF document text
- http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
- http://purl.org/dc/elements/1.1/In PDF document text
- http://ns.adobe.com/xap/1.0/In PDF document text
- http://ns.adobe.com/pdf/1.3/In PDF document text
- http://ns.adobe.com/xap/1.0/mm/In PDF document text
- http://www.aiim.org/pdfa/ns/extension/In PDF document text
- http://www.aiim.org/pdfa/ns/schema#In PDF document text
- http://www.aiim.org/pdfa/ns/property#In PDF document text
- http://www.aiim.org/pdfa/ns/id/In PDF document text
- http://bluthlinmi.yolasite.com/resources/microsoft-exchange-server-2013-management-pack-crack-free-download.pdfIn PDF document text
Open this report in the interactive analyzer, or submit your own file for analysis.