Malicious PDF — malware analysis report

Heuristics 6

• Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
  Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
• Cracked-software lure uses shortlink/download gateway critical PDF_CRACKED_SOFTWARE_SHORTLINK_LURE
  PDF visible text advertises a crack, serial number, archive, or pirated-software download and pairs it with a shortlink or encoded download gateway. This is a high-confidence social-engineering carrier for unwanted software or droppers; the PDF itself is not a parser exploit.
• Cracked-software lure uses download-gateway redirectors high PDF_CRACKED_SOFTWARE_REDIRECTOR_LINK_FARM
  PDF contains multiple cracked-software/keygen/serial-key lure links together with long encoded download-gateway URLs or known crack-download redirector hosts. This is stronger than generic piracy vocabulary: the document is an SEO lure that funnels users through redirect/download infrastructure commonly used for adware, unwanted software, or droppers.
• PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LURE
  PDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
• External URI info PDF_URI
  PDF contains an external URL action
• Embedded URL info EMBEDDED_URL
  One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
  URL http://evacdir.com/affirmative/ZG93bmxvYWR8Slg2Tm05dGZId3hOalUwTnpnd09EYzVmSHd5TlRrd2ZId29UU2tnVjI5eVpIQnlaWE56SUZ0WVRVeFNVRU1nVmpJZ1VFUkdYUQ/scandinavian&doon&U2lsaG91ZXR0ZSBTdHVkaW8gRGVzaWduZXIgRWRpdGlvbiBMaWNlbnNlIEtleWdlbiBoaXQU2l&integrations PDF link annotation

  • https://www.slowyogalife.com/wp-content/uploads/2022/06/Tutorial_Swansoft_CNC_Simulator__2018.pdfIn PDF document text
  • https://aurespectdesoi.be/_hot_-download-keygen-xforce-for-maya-2019-keygen/In PDF document text
  • https://myirishconnections.com/wp-content/uploads/2022/06/Indian_Pharmacopoeia_Volume_1_CIQP_Patna_Bihar__Exotic_India_Art.pdfIn PDF document text
  • https://nalogmsk.ru/advert/vacuacion-mambo-y-merengue-mambo-groove-loops/In PDF document text
  • https://www.acvconsultoria.com/wp-content/uploads/2022/06/Hp_Photo_Printing_Software_Version_2625_Download_Firefox.pdfIn PDF document text
  • http://inventnet.net/advert/bome-midi-translator-pro-v1-7-2-pc-cracked-rar-file-updated/In PDF document text
  • https://vincyaviation.com/fordoutcodeincodecalculatorcrack-2/In PDF document text
  • https://biodashofficial.com/official-samsung-galaxy-note-3-lte-sm-n9005-stock-rom/In PDF document text
  • https://topdriveinc.com/wp-content/uploads/2022/06/Fidic_Letters_By_Contractorpdf.pdfIn PDF document text
  • https://ciying.info/adobe-indesign-cs6-keygen-setup-crack-portable/In PDF document text
  • https://koalalauncher.com/wp-content/uploads/2022/06/Sardiman_Interaksi_Dan_Motivasi_Belajar_Mengajar_Pdf_Download_BEST.pdfIn PDF document text
  • https://www.abltransfo.com/wp-content/uploads/2022/06/gvox_encore_505_serial_number.pdfIn PDF document text
  • http://pixelemon.com/telecharger-gratuitement-revit-2019-francais-avec-crack-32-bit/In PDF document text
  • https://donin.com.br/advert/renault-pin-extractor-2-best/In PDF document text
  • http://www.be-art.pl/wp-content/uploads/2022/06/allvyct.pdfIn PDF document text
  • http://barrillos.es/wp-content/uploads/2022/06/Movavi_Video_Converter_2010_Crack_With_Activation_Key_2020.pdfIn PDF document text
  • https://doyousue.com/wp-content/uploads/2022/06/wanivan.pdfIn PDF document text
  • https://simbol.id/index.php/2022/06/10/blacks-regulation-dictionary-tenth-version-pdf-free-1468/In PDF document text
  • https://sunuline.com/upload/files/2022/06/J8aSZO5ul8cZX4uQNG5G_10_3b3de098528867e16ef731194f48d6fe_file.pdfIn PDF document text
  • http://www.zebrachester.com/rdsharmamathematicsclass11pdfdownload-extra-quality/In PDF document text
  • https://myirishconnections.com/wp-In PDF document text
  • https://www.acvconsultoria.com/wp-In PDF document text
  • https://koalalauncher.com/wp-In PDF document text
  • http://evacdir.com/affirmative/zg93bmxvywr8slg2tm05dgzid3hoaluwtnpnd09eyzvmshd5tlrrd2zid29uu2tnvji5evpiqnlawe56suz0wvrvefnvru1nvmpjz1vfukdyuq/scandinavian&doon&u2lsag91zxr0zsbtdhvkaw8grgvzawduzxigrwrpdglvbibmawnlbnnlietlewdlbiboaxqu2l&integrationsIn PDF document text
  • http://barrillos.es/wp-content/uploads/2022/06/movavi_video_converter_2010_crack_with_activation_key_2020.pdfIn PDF document text
  • http://www.tcpdf.orgIn PDF document text
  • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
  • http://purl.org/dc/elements/1.1/In PDF document text
  • http://ns.adobe.com/xap/1.0/In PDF document text
  • http://ns.adobe.com/pdf/1.3/In PDF document text
  • http://ns.adobe.com/xap/1.0/mm/In PDF document text
  • http://www.aiim.org/pdfa/ns/extension/In PDF document text
  • http://www.aiim.org/pdfa/ns/schema#In PDF document text
  • http://www.aiim.org/pdfa/ns/property#In PDF document text
  • http://www.aiim.org/pdfa/ns/id/In PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.