Malicious PDF — malware analysis report

Heuristics 6

• Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
  Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
• Cracked-software lure uses download-gateway redirectors high PDF_CRACKED_SOFTWARE_REDIRECTOR_LINK_FARM
  PDF contains multiple cracked-software/keygen/serial-key lure links together with long encoded download-gateway URLs or known crack-download redirector hosts. This is stronger than generic piracy vocabulary: the document is an SEO lure that funnels users through redirect/download infrastructure commonly used for adware, unwanted software, or droppers.
• PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LURE
  PDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
• Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTON
  Document contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
• External URI info PDF_URI
  PDF contains an external URL action
• Embedded URL info EMBEDDED_URL
  One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
  URL http://findthisall.com/barach/beno.c2FydmF0b2JoYWRyYSBjaGFrcmEgc29mdHdhcmUgZnJlZSBkb3dubG9hZAc2F.cargill.zoku..ZG93bmxvYWR8SFY2YW1wNVpYeDhNVFkxT0RJeE9EazROWHg4TWpVNU1IeDhLRTBwSUZkdmNtUndjbVZ6Y3lCYldFMU1VbEJESUZZeUlGQkVSbDA PDF link annotation

  • http://vietditru.org/advert/sayo-by-silent-sanctuary-free-mp3-download-15-patched/In PDF document text
  • https://www.vikaybeauty.com/wp-content/uploads/2022/07/Brainworx_bx_boom_Native_VST_VST3_RTAS_v124rarrar.pdfIn PDF document text
  • https://www.eecoeats.com/wp-content/uploads/2022/07/Digital_Anarchy_Plugins_Collection_Pack_for_Adobe_Photoshop.pdfIn PDF document text
  • https://www.easyblogging.in/wp-content/uploads/2022/07/tamfede.pdfIn PDF document text
  • http://bookmanufacturers.org/wp-content/uploads/2022/07/haldjaic.pdfIn PDF document text
  • https://kireeste.com/showcase-2006-32-bit-xforce-keygen-work/In PDF document text
  • https://ufostorekh.com/wp-content/uploads/2022/07/jarrdar.pdfIn PDF document text
  • https://serippyshop.com/defender-control-1-6-__link__-free-download/In PDF document text
  • http://vegaspillow.ir/wp-content/uploads/2022/07/VNC_Scanner_GUI_V1243.pdfIn PDF document text
  • https://www.siriusarchitects.com/advert/contoh-soal-psikometri-12-pdf-__top__/In PDF document text
  • http://sturgeonlakedev.ca/2022/07/25/callofduty2highlycompressed429mbpcchecked-2021/In PDF document text
  • https://cancuntoursbook.com/wp-content/uploads/2022/07/hellgate_london_x64_dx9_trainer_18.pdfIn PDF document text
  • http://pepsistars.com/windows9ultimateisofreedownload-better/In PDF document text
  • https://gembeltraveller.com/wondershare-dr-fone-9-9-10-crack-better/In PDF document text
  • https://earthoceanandairtravel.com/2022/07/25/download-link-keygen-xforce-for-3ds-max-2014-activation/In PDF document text
  • http://www.fuertebazar.com/wp-content/uploads/2022/07/letywil.pdfIn PDF document text
  • https://jacobeachcostarica.net/cambiar-idioma-nitro-pdf/In PDF document text
  • https://vincyaviation.com/presto-pagemanager-9-professional-keygen-patched/In PDF document text
  • https://papayo.nl/nieuws/hd-online-player-mary-kom-movie-720p-download-kickass-best/In PDF document text
  • http://it-labx.ru/?p=95083In PDF document text
  • https://www.vikaybeauty.com/wp-In PDF document text
  • https://www.eecoeats.com/wp-In PDF document text
  • https://earthoceanandairtravel.com/2022/07/25/download-link-keygen-xforce-for-3ds-In PDF document text
  • http://findthisall.com/barach/beno.c2fydmf0b2joywryysbjagfrcmegc29mdhdhcmugznjlzsbkb3dubg9hzac2f.cargill.zoku..zg93bmxvywr8sfy2yw1wnvpyedhnvfkxt0rjee9eazrowhg4twpvnu1iedhlrtbwsuzkdmntundjbvz6y3lcyldfmu1vbejesuzzeulgqkvsbdaIn PDF document text
  • http://www.tcpdf.orgIn PDF document text
  • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
  • http://purl.org/dc/elements/1.1/In PDF document text
  • http://ns.adobe.com/xap/1.0/In PDF document text
  • http://ns.adobe.com/pdf/1.3/In PDF document text
  • http://ns.adobe.com/xap/1.0/mm/In PDF document text
  • http://www.aiim.org/pdfa/ns/extension/In PDF document text
  • http://www.aiim.org/pdfa/ns/schema#In PDF document text
  • http://www.aiim.org/pdfa/ns/property#In PDF document text
  • http://www.aiim.org/pdfa/ns/id/In PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.