MALICIOUS
64
Risk Score
Malware Insights
MITRE ATT&CK
T1566.002 Spearphishing Attachment
T1204.002 Malicious File
The PDF document contains a large number of external links, identified as a 'PDF_SEO_LINK_FARM' heuristic. One of the primary external URIs points to a suspicious URL that appears to be a download path. This suggests the document is designed to redirect users to potentially malicious content or malware downloads, likely through a link farm strategy.
Machine Learning
- Nyx PDF Classifier clean score 0.0047
Heuristics 3
-
Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARMSmall PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://thedirsite.com/youngsters.collidenfl.references/ZG93bmxvYWR8OVJlWXpWaVlYeDhNVFkxTmpnNU1qTTFNbng4TWpVM05IeDhLRTBwSUhKbFlXUXRZbXh2WnlCYlJtRnpkQ0JIUlU1ZA/leda.potatoism.Rm9yZCBNdXN0YW5nIFdpbmRvd3MgNyBUaGVtZQRm9.rans
- https://shahjalalproperty.com/wp-content/uploads/2022/07/lisskaf.pdf
- https://www.careerfirst.lk/sites/default/files/webform/cv/victyem568.pdf
- https://www.petisliberia.com/backdoor-irc-sticy-a-removal-tool-crack-download/
- http://launchimp.com/movie-iso-crack-keygen-for-lifetime-free-download/
- https://www.batiksukses.com/super-blank-pc-windows/
- https://delicatica.ru/2022/07/04/appsbox-crack-activator-download-2022-latest/
- https://www.careerfirst.lk/sites/default/files/webform/cv/Astronomy-Picture-of-the-Day.pdf
- https://oualie.dev/wp-content/uploads/2022/07/EasyTutor__Crack_April2022.pdf
- https://www.careerfirst.lk/system/files/webform/cv/CharacterNavigator.pdf
- https://www.oregonweednetwork.com/wp-content/uploads/2022/07/Digital_Signal_Analysis.pdf
- http://www.ventadecoches.com/ooobtl2-full-product-key-march-2022/
- https://www.careerfirst.lk/sites/default/files/webform/cv/herbnao734.pdf
- https://comunicare-online.ro/wp-content/uploads/2022/07/Lytro__Updated2022.pdf
- https://atennis.kz/tour/upload/files/2022/07/4HunCqDLAYvA7AqMbsSx_04_4a1940e4e847e4ce0f0d6661ca9e3d9b_file.pdf
- https://ipayif.com/upload/files/2022/07/uEcwb6WDAaIV8vitz24t_04_1db93a46f090d120fde0fa74311a3f38_file.pdf
- https://ayoikut.com/advert/alert-thingy-serial-key/
- https://viceeventz.com/wp-content/uploads/2022/07/AutoIt_Portable.pdf
- https://hgpropertysourcing.com/wp-content/uploads/2022/07/EasyBuildSQL__Crack_3264bit.pdf
- http://it-labx.ru/?p=59673
- https://www.careerfirst.lk/sites/default/files/webform/cv/Astronomy-Picture-of-the-
- https://www.oregonweednetwork.com/wp-
- https://atennis.kz/tour/upload/files/2022/07/4HunCqDLAYvA7AqMbsSx_04_4a1940e4e8
- https://ipayif.com/upload/files/2022/07/uEcwb6WDAaIV8vitz24t_04_1db93a46f090d120
- https://hgpropertysourcing.com/wp-
- https://www.ubill.iastate.edu/system/files/webform/btop-file-upload-private/lisesavi931.pdf
- http://www.tcpdf.org
- https://www.ubill.iastate.edu/system/files/webform/btop-file-upload-
- http://www.w3.org/1999/02/22-rdf-syntax-ns#
- http://purl.org/dc/elements/1.1/
- http://ns.adobe.com/xap/1.0/
- http://ns.adobe.com/pdf/1.3/
- http://ns.adobe.com/xap/1.0/mm/
- http://www.aiim.org/pdfa/ns/extension/
- http://www.aiim.org/pdfa/ns/schema#
- http://www.aiim.org/pdfa/ns/property#
- http://www.aiim.org/pdfa/ns/id/
Open this report in the interactive analyzer, or submit your own file for analysis.