MALICIOUS
100
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
T1204.002 Malicious Link
The PDF contains a large number of embedded URLs, many of which are obfuscated and point to a domain that hosts what appears to be a link farm. The heuristic 'PDF_SEO_LINK_FARM' indicates this is a deliberate attempt to distribute malicious links, likely leading to further malware downloads or phishing pages. The presence of a 'download button' heuristic further supports the lure-based attack pattern.
Machine Learning
- Nyx PDF Classifier malicious score 0.9901
Heuristics 3
-
Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARMSmall PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://muicuiu.dumb1.com/6a02a06a08a09a07/Kidnapped-Being-Memoirs-of-the-Adventures-of-David-Balfour-in-the-Year-1751-How-He-Was-Kidnapped-and-Cast-Away-His-Sufferings-in-a-Desert-Isle-His-Journey-in-the-Wild-Highlands-His-Acquaintance-with-Alan-Breck-Stewart-and-Other-Notorious-Highland-Jac-by-Robert-Louis-Stevenson.pdf
- http://muicuiu.dumb1.com/3a04a07a00a00/Kidnapped-David-Balfour-1-by-Robert-Louis-Stevenson.pdf
- http://muicuiu.dumb1.com/1a00a04a03a07a03a05/Kidnapped-David-Balfour-1-by-Robert-Louis-Stevenson.pdf
- http://muicuiu.dumb1.com/5a02a03a06a03a09/Kidnapped-by-Robert-Louis-Stevenson-by-Robert-Louis-Stevenson.pdf
- http://muicuiu.dumb1.com/1a01a06a00a05a09a04/Kidnapped-Official-Edition-of-the-Edinburgh-World-City-of-Li-Canongate-Classics-by-Robert-Louis-Stevenson.pdf
- http://muicuiu.dumb1.com/6a09a08a05a00a09/Treasure-island-Kidnapped-Weir-of-Hermiston-The-master-of-Ballantrae-The-black-arrow-by-Robert-Louis-Stevenson.pdf
- http://muicuiu.dumb1.com/8a04a04a09a08a00/The-Strange-Case-of-Dr-Jekyll-and-Mr-Hyde-by-Robert-Louis-Stevenson-Fiction-Classics-Fantasy-Horror-Literary-by-Robert-Louis-Stevenson.pdf
- http://muicuiu.dumb1.com/6a09a08a05a01a01/The-Master-of-Ballantrae-Robert-Louis-Stevenson-by-Robert-Louis-Stevenson.pdf
- http://muicuiu.dumb1.com/6a00a01a00a07a05/Essays-of-Robert-Louis-Stevenson-by-Robert-Louis-Stevenson.pdf
- http://muicuiu.dumb1.com/6a09a08a05a00a00/The-Novels-of-R-L-Stevenson-Complete-Collection-13-Novels---Treasure-Island-The-Strange-Case-of-Dr-Jekyll-and-Mr-Hyde-The-Black-Arrow-of-Ballantrae-The-Wrong-Box-and-others-by-Robert-Louis-Stevenson.pdf
- http://muicuiu.dumb1.com/2a02a05a03a03a07/Olalla-by-Robert-Louis-Stevenson.pdf
- http://muicuiu.dumb1.com/3a06a07a01a01a07/The-Wrong-Box-by-Robert-Louis-Stevenson.pdf
- http://muicuiu.dumb1.com/9a01a01a09a01a04/The-Bottle-Imp-by-Robert-Louis-Stevenson.pdf
- http://muicuiu.dumb1.com/1a07a08a02a00a02/Dr-Jekyll-and-Mr-Hyde-by-Robert-Louis-Stevenson.pdf
- http://muicuiu.dumb1.com/5a07a05a01a09a06/Treasure-Island-by-Robert-Louis-Stevenson.pdf
- http://muicuiu.dumb1.com/1a05a09a08a08a02/The-Suicide-Club-by-Robert-Louis-Stevenson.pdf
- http://muicuiu.dumb1.com/9a00a09a03a04a04/Treasure-Island-by-Robert-Louis-Stevenson.pdf
- http://muicuiu.dumb1.com/5a00a03a03a07a05/Treasure-Island-by-Robert-Louis-Stevenson.pdf
- http://muicuiu.dumb1.com/6a05a01a03a07a09/Treasure-Island-by-Robert-Louis-Stevenson.pdf
- http://muicuiu.dumb1.com/3a02a02a06a05/Treasure-Island-by-Robert-Louis-Stevenson.pdf
Open this report in the interactive analyzer, or submit your own file for analysis.