MALICIOUS
94
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
The file is identified as malicious by ClamAV and an ML classifier, with heuristics indicating the presence of an external URI. The embedded URL, https://mezovuduw.ru/strik?utm_term=islam+%25C3%25B6ncesi+t%25C3%25BCrk+edebiyat%25C4%25B1+%25C3%25A7%25C4%25B1km%25C4%25B1%25C5%259F+sorular, is the primary indicator of malicious intent, likely serving as a phishing lure or a distribution point for further malware. No scripts were extracted, but the PDF structure and external URI suggest an attempt to redirect the user to a malicious site.
Machine Learning
- Nyx PDF Classifier malicious score 0.6619
Heuristics 3
-
ClamAV: Pdf.Phishing.Trojan-d2568dad23a94d95-d2568dad23a94d95-10044375-0 critical CLAMAV_DETECTIONClamAV detected this file as malware: Pdf.Phishing.Trojan-d2568dad23a94d95-d2568dad23a94d95-10044375-0
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL https://mezovuduw.ru/strik?utm_term=islam+%25C3%25B6ncesi+t%25C3%25BCrk+edebiyat%25C4%25B1+%25C3%25A7%25C4%25B1km%25C4%25B1%25C5%259F+sorular PDF link annotation
- https://cdn-cms.f-static.net/uploads/4414701/normal_606bc3da6e6b2.pdfIn PDF document text
- https://cdn-cms.f-static.net/uploads/4391599/normal_5fe9a697961d8.pdfIn PDF document text
- https://cdn-cms.f-static.net/uploads/4454299/normal_606be40aed72b.pdfIn PDF document text
- https://static.s123-cdn-static.com/uploads/4456119/normal_5fca9aa26744d.pdfIn PDF document text
- https://cdn-cms.f-static.net/uploads/4444643/normal_602a7327083c7.pdfIn PDF document text
- https://static.s123-cdn-static.com/uploads/4457281/normal_6007fd7ede2a9.pdfIn PDF document text
- https://cdn-cms.f-static.net/uploads/4405638/normal_6057b7932e9e2.pdfIn PDF document text
- https://uploads.strikinglycdn.com/files/62e9712d-eae0-457f-a53e-9c33b13fb88c/76907350333.pdfIn PDF document text
- https://uploads.strikinglycdn.com/files/db018ffd-8e40-4f67-898f-8c8fbd75528e/map_of_the_world_with_latitude_and_longitude_and_countries_and_cities.pdfIn PDF document text
- https://uploads.strikinglycdn.com/files/82b8982f-d9f7-4c5c-b584-ae803f7dd45a/gowijujibexawubarike.pdfIn PDF document text
- https://uploads.strikinglycdn.com/files/891b79a2-876e-4e42-b2ae-e1bcb23c5a94/13052225394.pdfIn PDF document text
- https://uploads.strikinglycdn.com/files/9fd1deaf-38e1-4ebb-a5c5-21382b5787b4/tibusaxokizufepedejivusor.pdfIn PDF document text
- https://uploads.strikinglycdn.com/files/054f689e-c7df-48cd-b92b-2554f1a2dc60/the_ascension_mysteries_audiobook.pdfIn PDF document text
- https://uploads.strikinglycdn.com/files/802a6e90-32d9-4438-9129-af33a32f8264/fifty_shades_of_grey_3_full_movie_in_hindi_dubbed_download_300mb.pdfIn PDF document text
- https://uploads.strikinglycdn.com/files/bf6f9de5-3b8b-46cf-9d92-4ddc8f053b76/is_potassium_perchlorate_legal.pdfIn PDF document text
- https://uploads.strikinglycdn.com/files/8a4062fc-96d9-4b4c-a38f-415a9a680192/tipo_de_premios_para_funcionarios.pdfIn PDF document text
- https://uploads.strikinglycdn.com/files/f76db12f-0d60-4295-957a-af7c24c390fc/sam_patch_the_famous_jumper_sparknotes.pdfIn PDF document text
- https://uploads.strikinglycdn.com/files/d9010d21-a804-4c9a-9cf4-2191f4c4604d/xenefuje.pdfIn PDF document text
- https://uploads.strikinglycdn.com/files/ad71da3c-545a-4852-834e-2097be0cbe12/2334705640.pdfIn PDF document text
- https://uploads.strikinglycdn.com/files/3cd158e2-6d37-4863-9d8d-9c3c8bf442f2/mezazegobiduneg.pdfIn PDF document text
Open this report in the interactive analyzer, or submit your own file for analysis.