MALICIOUS
64
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
T1204.002 Malicious Link
The PDF document contains a large number of external links, many of which point to other PDF files, suggesting a link farm designed to distribute malicious content. The heuristic 'PDF_SEO_LINK_FARM' indicates a mass of external links, with the primary URL being http://emailgoal.com/markim/clumpy/megacolon&monosaturated/runners/ZG93bmxvYWR8OE05TjJaNGRYeDhNVFkxTnpFNE5qazFOWHg4TWpVM05IeDhLRTBwSUhKbFlXUXRZbXh2WnlCYlJtRnpkQ0JIUlU1ZA.R2FuZ3NPZldhc3NleXB1cmhpbmRpbW92aWVmcmVlZG93bmxvYWQ3MjBwR2F.establish, which likely serves as a download or redirector for further malicious activity.
Machine Learning
- Nyx PDF Classifier clean score 0.0222
Heuristics 3
-
Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARMSmall PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://emailgoal.com/markim/clumpy/megacolon&monosaturated/runners/ZG93bmxvYWR8OE05TjJaNGRYeDhNVFkxTnpFNE5qazFOWHg4TWpVM05IeDhLRTBwSUhKbFlXUXRZbXh2WnlCYlJtRnpkQ0JIUlU1ZA.R2FuZ3NPZldhc3NleXB1cmhpbmRpbW92aWVmcmVlZG93bmxvYWQ3MjBwR2F.establish
- https://gameurnews.fr/upload/files/2022/07/KXyUMYG685587LZ9tZm6_07_6c82aad1a2075109e1edceedbbdb84c8_file.pdf
- https://danahenri.com/oxford-atpl-cbt-crack-18-verified/
- https://www.cab-bc.org/system/files/webform/fonepaw-iphone-data-recovery-320.pdf
- https://projfutr.org/wp-content/uploads/2022/07/lawtfel.pdf
- https://www.northcastleny.com/sites/g/files/vyhlif3581/f/uploads/north_castle_records_list_by_department.pdf
- https://horley.life/thor-ragnarok-english-3-telugu-dubbed-movie-online-link/
- https://www.travelrr.com/plants-vs-zombies-pc-download-full-versionl-better/
- https://gameurnews.fr/upload/files/2022/07/LA11gEMqYJH7f7EBf9gk_07_1160e13ac18017457742e130507e5b69_file.pdf
- https://inobee.com/upload/files/2022/07/6Ka4uZD2C7pEBzIvsqN5_07_6c82aad1a2075109e1edceedbbdb84c8_file.pdf
- https://cecj.be/wp-content/uploads/2022/07/Banshees03complete720p.pdf
- https://www.supercityproperty.co.nz/sites/default/files/webform/gidell330.pdf
- http://knowthycountry.com/?p=8161
- http://www.b3llaphotographyblog.com/death-note-desu-nto-complete-series-720p-hevc-x265-eng-download-exclusive/
- https://inmueblesencolombia.com/?p=70330
- https://www.reperiohumancapital.com/system/files/webform/favomis887.pdf
- https://tutorizone.com/uipath-studio-enterprise-version-v2019-4-4-updated/
- https://delicatica.ru/2022/07/08/hd-online-player-asc-timetable-2016-keygen-crack-portable/
- https://www.mil-spec-industries.com/system/files/webform/neljes891.pdf
- https://cctvhikvision.center/wp-content/uploads/2022/07/bergast-1.pdf
- http://classacteventseurope.com/wp-content/uploads/2022/07/Office_20132019_C2R_Install_644_Lite__Install_Microsoft_Of_Full_Version_VERIFIED.pdf
- http://www.tcpdf.org
- http://www.w3.org/1999/02/22-rdf-syntax-ns#
- http://purl.org/dc/elements/1.1/
- http://ns.adobe.com/xap/1.0/
- http://ns.adobe.com/pdf/1.3/
- http://ns.adobe.com/xap/1.0/mm/
- http://www.aiim.org/pdfa/ns/extension/
- http://www.aiim.org/pdfa/ns/schema#
- http://www.aiim.org/pdfa/ns/property#
- http://www.aiim.org/pdfa/ns/id/
Open this report in the interactive analyzer, or submit your own file for analysis.