MALICIOUS
60
Risk Score
Malware Insights
MITRE ATT&CK
T1204.002 Malicious File
The PDF contains a direct link to a payload hosted on nuriaperaire.com, as indicated by the PDF_DIRECT_PAYLOAD_LINK heuristic. This strongly suggests the document's purpose is to trick the user into downloading and executing a malicious file. No scripts were extracted from this sample.
Machine Learning
- Nyx PDF Classifier clean score 0.0004
Heuristics 1
-
PDF link points directly to executable/archive payload critical PDF_DIRECT_PAYLOAD_LINKPDF contains a clickable HTTP(S) URI whose path ends in an executable, script, shortcut, disk image, or archive extension. Documents can legitimately link to installers, so this is a high-risk delivery indicator rather than a standalone exploit fingerprint.
Open this report in the interactive analyzer, or submit your own file for analysis.