MALICIOUS
134
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
The PDF contains a large number of external links, many of which point to PDFs advertising cracked software, such as FIFA 22 key generators. This indicates a lure to download pirated software. The presence of numerous links to external PDFs suggests a link farm attack pattern.
Machine Learning
- Nyx PDF Classifier clean score 0.0085
Heuristics 5
-
Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARMSmall PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
-
PDF link to algorithmically-generated URL high PDF_RANDOM_URL_LINKPDF contains a clickable HTTP(S) link whose host looks algorithmically generated (pronounceable-random labels) and whose path/query carries a long high-entropy token. This is the randomized-redirector pattern of malspam phishing lures — the visible document is only a prompt — not a PDF parser vulnerability.
-
PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LUREPDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://signforcover.com/divulge.collages?shutoff=RmlmYSAyMgRml&edging=semillon&ZG93bmxvYWR8bnoxZUROdWZId3hOalUzTURNMk1qSXpmSHd5TlRjMGZId29UU2tnY21WaFpDMWliRzluSUZ0R1lYTjBJRWRGVGww=sheffield/styria PDF link annotation
- https://goldeneagleauction.com/wp-content/uploads/2022/07/yanern.pdfIn PDF document text
- https://baron-leather.com/wp-content/uploads/2022/07/Fifa_22.pdfIn PDF document text
- https://plans4creativewoodworking.com/fifa-22-key-generator-serial-number-full-torrent-free-download-2022-new/In PDF document text
- https://www.methanex.com/sites/default/files/responsible-care/MethanexIn PDF document text
- http://eveningandmorningchildcareservices.com/wp-content/uploads/2022/07/Fifa_22_For_Windows_April2022.pdfIn PDF document text
- https://allsporters.com/upload/files/2022/07/UmNfSfNKN31jS2QDawZ7_05_4b28ea9098c1d5b74a7b2895e2184bb5_file.pdfIn PDF document text
- https://ezellohub.com/fifa-22-crack-file-only/In PDF document text
- http://www.kiwitravellers2017.com/2022/07/06/fifa-22-install-crack-license-key-2022/In PDF document text
- https://eskidiyse.com/index.php/fifa-22-keygen-generator-keygen-latest-2022/In PDF document text
- https://you.worldcruiseacademy.co.id/upload/files/2022/07/RczO1hnRiv3KSGslYqH4_05_4b28ea9098c1d5b74a7b2895e2184bb5_file.pdfIn PDF document text
- http://inventnet.net/advert/fifa-22-keygen-only-download-latest/In PDF document text
- https://www.theblender.it/fifa-22-license-key-full-free/In PDF document text
- http://tuinfonavit.xyz/?p=16828In PDF document text
- https://gmtphone.com/fifa-22-keygen-only-3264bit/In PDF document text
- https://www.cityofmound.com/sites/g/files/vyhlif6191/f/uploads/migrate_the_2040_comprehensive_plan-compressed_1.pdfIn PDF document text
- https://www.americanchillpodcast.com/upload/files/2022/07/Yl2R3nzIMbPjd5MUTqny_05_5d4592f70a9dbb4788d60e15c3aa09ad_file.pdfIn PDF document text
- https://promwad.com/sites/default/files/webform/tasks/fifa-22_24.pdfIn PDF document text
- http://barrillos.es/wp-content/uploads/2022/07/Fifa_22_Keygen_Crack_Serial_Key__With_Serial_Key_Free_Download.pdfIn PDF document text
- https://www.reiki.swiss/blog/index.php?entryid=4993In PDF document text
- https://instantitschool.com/fifa-22-with-license-key-free-april-2022/In PDF document text
- https://goldeneagleauction.com/wp-In PDF document text
- https://plans4creativewoodworking.com/fifa-22-key-generator-In PDF document text
- https://www.methanex.com/sites/default/files/responsible-In PDF document text
- http://eveningandmorningchildcareservices.com/wp-In PDF document text
- https://allsporters.com/upload/files/2022/07/UmNfSfNKN31jS2QDaIn PDF document text
- http://www.kiwitravellers2017.com/2022/07/06/fifa-22-install-crack-In PDF document text
- https://eskidiyse.com/index.php/fifa-22-keygen-generator-keygen-In PDF document text
- https://you.worldcruiseacademy.co.id/upload/files/2022/07/RczO1hIn PDF document text
- https://www.cityofmound.com/sites/g/files/vyhlif6191/f/uploads/miIn PDF document text
- https://www.americanchillpodcast.com/upload/files/2022/07/Yl2R3In PDF document text
- https://promwad.com/sites/default/files/webform/tasks/fifa-22_24.pIn PDF document text
- http://barrillos.es/wp-content/uploads/2022/07/Fifa_22_Keygen_CraIn PDF document text
- http://www.tcpdf.orgIn PDF document text
- http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
- http://purl.org/dc/elements/1.1/In PDF document text
- http://ns.adobe.com/xap/1.0/In PDF document text
- http://ns.adobe.com/pdf/1.3/In PDF document text
- http://ns.adobe.com/xap/1.0/mm/In PDF document text
- http://www.aiim.org/pdfa/ns/extension/In PDF document text
- http://www.aiim.org/pdfa/ns/schema#In PDF document text
- http://www.aiim.org/pdfa/ns/property#In PDF document text
- http://www.aiim.org/pdfa/ns/id/In PDF document text
🗂 Part of campaign:
secureserver.net
1471 samples
Open this report in the interactive analyzer, or submit your own file for analysis.