MALICIOUS
70
Risk Score
Malware Insights
MITRE ATT&CK
T1204.002 Malicious File
T1566.002 Spearphishing Attachment
The PDF contains a direct link to a payload, indicated by the PDF_DIRECT_PAYLOAD_LINK heuristic. The PDF_URI heuristic also points to a suspicious URL that could be used for further distribution or hosting of malicious content. The presence of a download button lure (SE_DOWNLOAD_BUTTON) reinforces the malicious intent of tricking the user into downloading a file.
Heuristics 4
-
PDF link points directly to executable/archive payload critical PDF_DIRECT_PAYLOAD_LINKPDF contains a clickable HTTP(S) URI whose path ends in an executable, script, shortcut, disk image, or archive extension. Documents can legitimately link to installers, so this is a high-risk delivery indicator rather than a standalone exploit fingerprint.
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://uncpbisdegree.com/download3.php?q=sports-car-design-phone-case.pdf
- http://uncpbisdegree.com/download4.php?q=sports-car-design-phone-case.pdf
- http://www.khabarrooz.com/reads-online/sports-car-design-phone-case.pdf
- http://telecoworld.org/reads-online/sports-car-design-phone-case.pdf
- http://riverside-resort.net/1/symbiotic-planet-a-new-look-at-evolution-science-masters-lynn-margulis.pdf
- http://riverside-resort.net/1/the-wedding-garden-mills-boon-love-inspired-redemption-river-book-2.pdf
- http://riverside-resort.net/1/the-worst-comic-book-events.pdf
- http://riverside-resort.net/1/studies-on-science-and-the-innovation-process-selected-works-of-nathan-rosenberg.pdf
- http://riverside-resort.net/1/sumita-arora-c-class-11-buy-online.pdf
- http://riverside-resort.net/1/un-disparatado-viaje-a-ratiquis.pdf
- http://riverside-resort.net/1/the-twelve-lesson-course-a-new-approach-to-violin-playing-music-sales-america.pdf
- http://riverside-resort.net/1/transit-1995-wiring-diagram.pdf
- http://riverside-resort.net/1/the-billionaires-designer-bride-bwwm-billionaire-romance-book-1-alexis-gold.pdf
- http://riverside-resort.net/1/the-boat-singapore-escape-cannibalism-at-sea.pdf
- http://uncpbisdegree.com/download4.php
- https://2351768.r.bat.bing.com/?ld=d3epAf0jxT9X3dK8gkMWGoHzVUCUy3A146ZIrs7bF63sIdevPn620wBWNMyt_a9T-WSmNmvBuZYh9ih2mVzinVh1aMPonQVim9nJ9BM3k-b5mVB0uRButbsEO0h0hVF6EAUfHuv8dyWvxM11uGeR4saDgfxRvGODhGMTk0LZFhNncQRyfv&u=http%3a%2f%2fwww.mycustomcase.com%3f%26url_key%3dsave40%26utm_source%3dbing%26url_key%3dsave40%26utm_source%3dBing%26ppc%3dy%26msclkid%3d%7bmsclkid%7d
- https://www.ebay.com/bhp/sports-car-iphone-4-case
- https://www.amazon.com/iPhone-SwiftBox-Detachable-Protector-Handmade/dp/B00RLUYBYS
- https://www.amazon.com/cell-phone-cases-screen-protectors/b?ie=UTF8&node=2407760011
- https://www.amazon.com/Cell-Phone-Cases/b?ie=UTF8&node=3081461011
- https://3184402.r.bat.bing.com/?ld=d3wdS4LIDH7ENze29cOSia8TVUCUxcK4trI1aJ6IV5dEUPwxT0JhdnbsfLCtJO_a1NSUlbnaaXr8pzSthUFVSh6c6cpeS5JKklu9soVmReMVO_8aax90vitw4BcYO0WUEGHLIh29pibRjEDrO696HnOe9DAAkS7eAbsRasCSht0wRKCyPw&u=https%3a%2f%2frover.ebay.com%2frover%2f1%2f711-213727-13078-0%2f2%3fmpre%3dhttp%253A%252F%252Fwww.ebay.com%252Fitm%252Flike%252F361850397248%26itemid%3d631118241767%26targetid%3d4580496722765438%26device%3dc%26adtype%3d%7badtype%7d%26googleloc%3d%26poi%3d%26campaignid%3d301076563%26adgroupid%3d1230353595487525%26rlsatarget%3dpla-4580496722765438%26abcId%3d1129776%26merchantid%3d51291%26query%3dsports%2520car%2520design%2520phone%2520case
- https://2514355.r.bat.bing.com/?ld=d3YrWw_7M-PAUriS7sSzop4zVUCUwT8M1Z-4YLlnmc54CKxZUdBfy0Kr2L4Tn6waBB_mIjDVug4hkUa_fHzOuGZORNKKPxrqx6dwKu72KaglY5-zvws_NBnZOPWlsX3A3w9HCzygDenudK6KUrOJR8XDU6E99dpISxarZMBzHEqXzYUe68&u=http%3a%2f%2fclickserve.dartsearch.net%2flink%2fclick%3flid%3d92700022228247327%26ds_s_kwgid%3d58700002265682353%26ds_s_inventory_feed_id%3d97700000001996342%26%26ds_e_adid%3d13735812830%26ds_e_product_group_id%3d4587574830332672%26ds_e_product_id%3dz179341140461373181%26ds_e_product_country%3dUS%26ds_e_product_language%3dEN%26ds_e_product_channel%3donline%26ds_url_v%3d2%26ds_dest_url%3dhttps%3a%2f%2fwww.zazzle.com%2fblue_70s_sports_car_samsung_s4_case-179341140461373181%3frf%3d238772772155923633%26tc%3d%5b*GCLID*%5d%26gsrc%3d%5b*GCLSRC*%5d%26utm_source%3dbing%26utm_medium%3dcpc%26utm_campaign%3dshopping%26msclkid%3d%7bmsclkid%7d
- https://1059401.r.bat.bing.com/?ld=d3Cjp-nPGzEQ85dL2aKvgozjVUCUxTsGlFpqj_VbZ2Focy-C0XPhJs3aFokTqU4newyjA-qemaWRntDvSgxjw6ku0SoG_2TiRLztqvAXiZI-CnDOK_xcuvhbIv4j9yxaq1ienjvmkBtl0eNm8OxAmKB8I9BxwaroREVwYKDkqETKtLAY_Z&u=https%3a%2f%2fwww.collage.com%2fcustom-photo-phone-cases%3flc%3dsave60%26utm_source%3dbing%26utm_medium%3dcpc%26utm_campaign%3dshopping%26msclkid%3d%7bmsclkid%7d
- https://3023374.r.bat.bing.com/?ld=d3Qs1_r2Vm86VfX7s7lqCtNDVUCUzLElJs5eKyvITFZXgN66_djSRFfxKifPY8GMy-OQE04yFrEgkF0_exwuBm4GsY4uanHo6GJL_Htn0_KA2rFfz5d3C_8mYaShlSaSA6dUm1czmrLm5oI-gNCtp27MXpCyL-OcaBM5iMk1M4K0TogCN8&u=http%3a%2f%2fwww.2daydeliver.com%2fproduct_detail.php%3fid%3dSKUB01M6COHWB%26last_node%3dTrunks%26click_src%3dbingads%26clicksrc-act%3dbingads222-2dd-1-mill%26msclkid%3d%7bmsclkid%7d%26utm_source%3dbing%26utm_medium%3dcpc%26utm_campaign%3d2dd%25201-mill%26utm_term%3d4580290564534311%26utm_content%3d2dd%25201-mill
- https://2180028.r.bat.bing.com/?ld=d3vJyGJNciGs7fFjn1b9aAYDVUCUwFhMgGMW88cqXdCz8y3qvZCYQr6KiS5ex1wcISrLipJCAVfgVZ5Z7ufqbXh_1M_z7w2_d5dcJ9qJ11Glp0rXz13riVXUAt1TcDTwfOE9qtrnwlO85vz8NcwztJuK1nMYnoLl9c8hM11CcuNarX_CYA&u=https%3a%2f%2fwww.myphonecase.com%2fproducts%2fegc-platinum-sports-car-series-iphone-5-5s-case-hot-pink-sale%3fvariant%3d10947106113
- https://45025804.r.bat.bing.com/?ld=d3ov_pF_ecprJWcCMD-LBruzVUCUy2ahYNAidEeffruKhBaWJ1TYxB6Y2_ncYzlsjJ6MeuLyrU0Ejf8Hm6To8MIPlNmnkSAwUJY_wOoCr55E6k4gerYjw_DQrjCgO_bDk6CKm7e4rrhhimlFPojAjwc2aRgRSe35mYmh_vHo4IHdl-jxFk&u=https%3a%2f%2falexnld.com%2fproduct%2f3d-mini-sports-car-style-plastic-case-for-iphone-5-5s%2f%3futm_source%3dbing%26utm_medium%3dcpc%26utm_campaign%3dProduct%2520Ads\(BSC\)%26utm_term%3d1101400171368%26utm_content%3dAd%2520group%2520%25231
- https://www.amazon.com/iPhone-Sports-Design-Surface-Aluminum/dp/B01LW04S3H
- https://www.aliexpress.com/item/3D-sports-car-phone-case-for-iphone-5-6-6S-7-Plus-cell-phone-case/32801674785.html
- https://www.zazzle.com/car+iphone+cases
- https://54109427.r.bat.bing.com/?ld=d3hhipZsw-l8OzjUAGIE-9RjVUCUyttxjK2z0ENJmEjWa_FsNC8hNxGkMDmx1kjUhYPUtWT3Qw9ZwkKBOTInycw2T3iWv-dD2NJBZLIb1aVx1oTI9CScplgDQXF5gsPI6AxQz7Fgl738OlAY51LdA0aHaF9w1rCUVzLMiK56mQ4iRejQsT&u=http%3a%2f%2fwww.amazon.com%2fs%2f%3fie%3dUTF8%26keywords%3dsports%2bcar%2bphone%2bcase%26tag%3dmh0b-20%26index%3daps%26hvadid%3d77653063139564%26hvqmt%3db%26hvbmt%3dbb%26hvdev%3dc%26ref%3dpd_sl_4syhvqjp5v_b
- https://1059401.r.bat.bing.com/?ld=d3Ht0yEzd2DyRCC6ACCn6LuzVUCUwAhu79Mkp-M0IIL_-rY7vuDq8A4jQesDewo0vjBjAj8IbqmzbX1QizaJVEOuiQqEPnv9QInGNY4dAPdHwxk1uQx6u4vxi2A-GxbALORxgPOz788GBhKLPciwFPRrNQFzi-pUjEXV0Pb8ngoZ11HkEM&u=https%3a%2f%2fwww.collage.com%2fcustom-photo-phone-cases%3flc%3dsave60%26utm_source%3dbing%26utm_medium%3dcpc%26utm_campaign%3dPhoneCase%26msclkid%3d%7bmsclkid%7d
- http://www.sitejabber.com/reviews/www.collage.com#439
- https://42070830.r.bat.bing.com/?ld=d3q0Oh6NpvH0_kV6EX6zsleTVUCUxHdJf8rJqIbrGnfxJVuoasUELCAUvaZo96HrtRsjY87_O49rYL1t3JkxPCq7j4KrdwgeOKMdAjK2Gp960HKTbgpUnIVrfc_ckkpXjZ2nPrTlqV0Iee8S219fePAxNTMACeuKJ4oDwuZm4AYiiTisBM&u=http%3a%2f%2fwww.fanatics.com%2fpartnerID%2f10413%2fsource%2fgppc95-ncaa-generic-hardline-sl-cell-cases%3futm_campaign%3dNCAA%2520-%2520Site%2520Links%2520Hardlines%2520\(Generic\)%7c133263377%26utm_medium%3dppc%26ks_id%3d6250_kw9521887%26utm_term%3dcollege%2520sports%2520phone%2520cases%26matchtype%3dbb%26utm_source%3do%26target%3dkwd-134051700296%3aloc-190%26pcrid%3d14754748301%26adposition%3d%7badposition%7d%26msclkid%3d%7bmsclkid%7d
- http://go.microsoft.com/fwlink/?LinkId=521839&CLCID=0409
- http://go.microsoft.com/fwlink/?LinkID=246338&CLCID=0409
- https://go.microsoft.com/fwlink/?linkid=868922
- http://go.microsoft.com/fwlink/?LinkID=286759&CLCID=409
- http://go.microsoft.com/fwlink/?LinkID=617297
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
font_00_sfnt_off0000ee83.binb452486af15bf721e26f7217f041c0233c90f592b1778ace71e15d599280ebb2 |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xEE83 | 15560 bytes |
font_01_sfnt_off00011d51.bind71b4eec6a093945515f7e9eeb76edb69d09b776cfd658e0e2707d5ad7408f2e |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x11D51 | 10616 bytes |
Open this report in the interactive analyzer, or submit your own file for analysis.