MALICIOUS
94
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
T1204.002 Malicious Link
The PDF file contains numerous external links, many of which are identified as a link farm advertising cracked software. One prominent URL points to a resource that appears to be a download link for a second-stage payload. The presence of these links strongly suggests a malicious intent to redirect users to potentially harmful content.
Machine Learning
- Nyx PDF Classifier clean score 0.0090
Heuristics 4
-
Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARMSmall PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
-
PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LUREPDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://awarefinance.com/alll.ZG93bmxvYWR8REw2WldJeFlueDhNVFkxTmpjM01UZ3hPSHg4TWpVM05IeDhLRTBwSUhKbFlXUXRZbXh2WnlCYlJtRnpkQ0JIUlU1ZA/besting/gloats/keratoconjunctivitis/VHJ1ZSBGZWFyOiBGb3JzYWtlbiBTb3VscyBQYXJ0IDIgZG93bmxvYWQgY29tcGxldGUgZWRpdGlvbgVHJ/praises?kouwenhoven=parsonage PDF link annotation
- https://thecryptobee.com/wp-content/uploads/2022/07/belmac.pdfIn PDF document text
- https://marketstory360.com/cuchoast/2022/07/paxmar.pdfIn PDF document text
- https://www.8premier.com/wp-content/uploads/2022/07/takkvla.pdfIn PDF document text
- https://roofingbizuniversity.com/wp-content/uploads/2022/07/Dragon_Ball_Z_Theme_Mp3_Download.pdfIn PDF document text
- https://kansabook.com/upload/files/2022/07/LKbrXRwSdX53AULcHM2G_03_434e4878cb3c27e4e307aa13358e8bbd_file.pdfIn PDF document text
- https://www.nn.be/fr/system/files/webform/job_application_form/resume/crack-imageline-pitcher-vst-v101-ak.pdfIn PDF document text
- https://xplico.no/wp-content/uploads/2022/07/acer_eg31m_v11_drivers_m2_series.pdfIn PDF document text
- https://www.ozcountrymile.com/advert/pic18-simulator-ide-2-61-new-crack/In PDF document text
- https://www.twp.ferguson.pa.us/sites/g/files/vyhlif576/f/styles/news_image_teaser/public/news/pages_from_bos_agenda_packet_05-16-2022_with_links.pdfIn PDF document text
- https://gidaszewska.pl/wp-content/uploads/2022/07/RStudio_812_Build_175721_Network_Technician_With_Crack_Lates.pdfIn PDF document text
- https://www.jesuspiece.cash/2022/07/03/queenofthievesfullcrack-__hot__/In PDF document text
- https://sportingtip.com/serial-emjysoft-photo-identite-2013-rar/In PDF document text
- http://escortguate.com/vorpx-oculus-rift-vr-driver-ofmanwhocan-cracked-129311/In PDF document text
- http://videogamefly.com/2022/07/03/tamil-movie-720p-download-rakht-dhaar-hot/In PDF document text
- http://www.kiwitravellers2017.com/2022/07/03/free-download-tildes-birojs-2011-_best_/In PDF document text
- https://jyotienterprises.net/wp-content/uploads/2022/07/physar.pdfIn PDF document text
- https://storage.googleapis.com/blacksnetwork/upload/files/2022/07/IWbqHlvIVPwOdbqwhwpM_03_228bb8167b5aa114b1e70c68dfe490e0_file.pdfIn PDF document text
- http://pixelemon.com/beppe-fenoglio-la-malora-pdf-download-install/In PDF document text
- https://bikerhall.com/upload/files/2022/07/R6DB72K1bm75V6hynV9E_03_434e4878cb3c27e4e307aa13358e8bbd_file.pdfIn PDF document text
- https://www.aussnowacademy.com/acronis-true-image-2014-17-0-build-6614-premium-download-pc-top/In PDF document text
- http://www.tcpdf.orgIn PDF document text
- http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
- http://purl.org/dc/elements/1.1/In PDF document text
- http://ns.adobe.com/xap/1.0/In PDF document text
- http://ns.adobe.com/pdf/1.3/In PDF document text
- http://ns.adobe.com/xap/1.0/mm/In PDF document text
- http://www.aiim.org/pdfa/ns/extension/In PDF document text
- http://www.aiim.org/pdfa/ns/schema#In PDF document text
- http://www.aiim.org/pdfa/ns/property#In PDF document text
- http://www.aiim.org/pdfa/ns/id/In PDF document text
🗂 Part of campaign:
secureserver.net
1471 samples
Open this report in the interactive analyzer, or submit your own file for analysis.