MALICIOUS
70
Risk Score
Malware Insights
MITRE ATT&CK
T1204.002 Malicious Link
T1059.001 PowerShell
The file is identified as a PDF dropper by ClamAV, indicating its primary function is to deliver other malware. The document body contains multiple links to 'uncpbisdegree.com', which are likely malicious download URLs disguised as a book download. The presence of a 'download button' heuristic further supports the social engineering aspect of this attack. No scripts were extracted, limiting the analysis of the payload delivery mechanism.
Heuristics 4
-
ClamAV: Pdf.Dropper.Agent-9229384-0 critical CLAMAV_DETECTIONClamAV detected this file as malware: Pdf.Dropper.Agent-9229384-0
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://uncpbisdegree.com/download3.php?q=what-if-i-had-never-tried-it-valentino-rossi-the-autobiography.pdf
- http://uncpbisdegree.com/download4.php?q=what-if-i-had-never-tried-it-valentino-rossi-the-autobiography.pdf
- http://www.filesdetector.com/if/what-if-i-had-never-tried-it-valentino-rossi-the-autobiography/never-tried-i
- http://openstorage.gunadarma.ac.id/abstract/graduate/2656-8019-1-SM.pdf
- http://libtec.de/what/if/what_if_i_had_never_tried_it_valentino_rossi_the_autobiography.pdf
- http://indumo.de/what/if/what_if_i_had_never_tried_it_valentino_rossi_the_autobiography.pdf
- http://riverside-resort.net/1/the-heart-of-redness-zakes-mda.pdf
- http://riverside-resort.net/1/simple-solutions-math-grade-3-answer-key.pdf
- http://riverside-resort.net/1/trendy-top-walgreens.pdf
- http://riverside-resort.net/1/solution-upper-intermediate-progress-test-unit-10.pdf
- http://riverside-resort.net/1/the-gabble-and-other-stories-polity.pdf
- http://riverside-resort.net/1/spring-enterprise-recipes-a-problem-solution-approach-1st-edition.pdf
- http://riverside-resort.net/1/stoichiometry-answer-key-pearson.pdf
- http://riverside-resort.net/1/sharper-image-snc200-headphones-owners-manual.pdf
- http://riverside-resort.net/1/startech-pm1115umf-owners-manual.pdf
- http://riverside-resort.net/1/series-circuit-problems-ep-903-answers-mybooklibrary-com.pdf
- https://www.amazon.com/What-Had-Never-Tried-Autobiography/dp/0099486962
- https://www.amazon.com/Biographies-Memoirs-Books/b?ie=UTF8&node=2
- https://www.amazon.com/Arts-Literature-Biographies-Memoirs-Books/b?ie=UTF8&node=2327
- https://www.amazon.com/What-Had-Never-Tried-Autobiography/dp/0760326827
- https://www.amazon.com/Engineering-Transportation-Books/b?ie=UTF8&node=173507
- https://www.amazon.com/Automotive-Nonfiction-Books/b?ie=UTF8&node=10503
- http://www.goodreads.com/book/show/1061188.What_If_I_Had_Never_Tried_It
- https://www.amazon.com/product-reviews/0760326827
- https://41023672.r.bat.bing.com/?ld=d3-JGpNZaj8_ErNLIuHJhw0TVUCUxIwllGvOuF45Lhxb2vEQWvFA4sMkGjfEzVyY0TM2Sh5EXcMuMxLaYB2UEPxNPrbCk_jwSzLkiQCeWmGhybobhc03nvfGMDpybduBJO4zjKxp6N9suIs3M_dk7Im8GfjTi0VKWRdnCUtPu4Pfwym3Gu&u=http%3a%2f%2ftracker.marinsm.com%2frd%3fcid%3dsnl9t30fh0%26lp%3dhttps%3a%2f%2fwww.thriftbooks.com%2fw%2fwhat-if-i-had-never-tried-it-the-autobiography_valentino-rossi%2f501889%2f%3fisbn%3d1844138801%26idiq%3d27362682%2526mkwid%253DetF1ZewZ%257Cdc%2526pcrid%253D11558858229%26utm_source%3dbing%26utm_medium%3dcpc%26utm_campaign%3dBing%2520Shopping%2520%257C%2520Biographies%2520%2526%2520Memoirs%26utm_term%3d1101002862897%26utm_content%3dBiographies%2520%2526%2520Memoirs
- https://3184402.r.bat.bing.com/?ld=d3WwJqpwnrjA_IF0DjyhbU1TVUCUzrUqo73ijM4xwG3zoBLyw4yYoc6UInbrmBcxBU8EdOF1YKVAnxGAPwPGSIC8ertJUilT24e9JnBG5FT63NmWtrcahSTSYAox8JecX5OXfKDqhKTK0Gy8eFYhoZz7d9wzRPKw9yVxqor6uVxAkBJ8XX&u=https%3a%2f%2frover.ebay.com%2frover%2f1%2f711-213727-13078-0%2f2%3fmpre%3dhttp%253A%252F%252Fwww.ebay.com%252Fitm%252Flike%252F142626437335%26itemid%3d142626437335%26targetid%3d4580909039660316%26device%3dc%26adtype%3d%7badtype%7d%26googleloc%3d%26poi%3d%26campaignid%3d301076558%26adgroupid%3d1236950668444203%26rlsatarget%3dpla-4580909039660316%26abcId%3d1129776%26merchantid%3d51291%26query%3dwhat%2520if%2520i%2520had%2520never%2520tried%2520it%2520valentino%2520rossi%2520the%2520autobiography
- https://41023672.r.bat.bing.com/?ld=d3rXOEDrJXlJ0HNqTk25TEpDVUCUxoisAn8CdFzGQB4z0y5WNr9ROeNSOGwapHPW4CMDxr45VgZAS5TSJ7ViNTbuzWG3wCGyRRiZ6aySzgxyp1aZczTGT1GrPFdMBGgd9a5lTh7VQ_8AgC1vAJBcVs9AQpYKhQONZYUsGFPSO3IcAAFrew&u=http%3a%2f%2ftracker.marinsm.com%2frd%3fcid%3dsnl9t30fh0%26lp%3dhttps%3a%2f%2fwww.thriftbooks.com%2fw%2fwhat-if-i-had-never-tried-it-the-autobiography_valentino-rossi%2f501889%2f%3fisbn%3d0760326827%26idiq%3d11116964%2526mkwid%253DfSxH7yHd%257Cdc%2526pcrid%253D11558858644%26utm_source%3dbing%26utm_medium%3dcpc%26utm_campaign%3dBing%2520Shopping%2520%257C%2520Sports%2520%2526%2520Outdoors%26utm_term%3d1101002865667%26utm_content%3dSports%2520%2526%2520Outdoors
- https://3184402.r.bat.bing.com/?ld=d3cLLjKcTE59ZjoSEBAMezvzVUCUxBc2uhy94nDm5svDSuvMzE-OKXICSCipbYMWCaiTR3fMJ5_P_9CKsgxzdFoQKxHrIb7vdCnrT1Wtin5UXaz8M0drO--VswP5Bj7ItMr9sYN4vPH8brHYxDsrCIVi7fXwokTBq8IHsgyPr5InwU66JU&u=https%3a%2f%2frover.ebay.com%2frover%2f1%2f711-213727-13078-0%2f2%3fmpre%3dhttp%253A%252F%252Fwww.ebay.com%252Fitm%252Flike%252F311858321606%26itemid%3d311858321606%26targetid%3d4580771600742623%26device%3dc%26adtype%3d%7badtype%7d%26googleloc%3d%26poi%3d%26campaignid%3d301076558%26adgroupid%3d1234751645528905%26rlsatarget%3dpla-4580771600742623%26abcId%3d1129776%26merchantid%3d51291%26query%3dwhat%2520if%2520i%2520had%2520never%2520tried%2520it%2520valentino%2520rossi%2520the%2520autobiography
- https://3184402.r.bat.bing.com/?ld=d3oDlzjGdlzbFteohjoXzsTDVUCUyIZwTjKmFHDQFBxDke1QVQFDl1j3ua66FHlfhWbcd8AxvUvcGNeC1i8zaSIKY-xBOJ5p8qB6CXSnrVuviFvOR-REpgwfPFcWjqdQLCjY9mM8p3OAQthQIpV3CAWLBvRmfeoUNtoO0_CXgsltzyKYi3&u=https%3a%2f%2frover.ebay.com%2frover%2f1%2f711-213727-13078-0%2f2%3fmpre%3dhttp%253A%252F%252Fwww.ebay.com%252Fitm%252Flike%252F382282100943%26itemid%3d382282100943%26targetid%3d4580153125713679%26device%3dc%26adtype%3d%7badtype%7d%26googleloc%3d%26poi%3d%26campaignid%3d301076558%26adgroupid%3d1224856036861472%26rlsatarget%3dpla-4580153125713679%26abcId%3d1129776%26merchantid%3d51291%26query%3dwhat%2520if%2520i%2520had%2520never%2520tried%2520it%2520valentino%2520rossi%2520the%2520autobiography
- https://3184402.r.bat.bing.com/?ld=d35tDnh6xbRwvwG63CyHD8VTVUCUwIV6jT9zuqnHI-zeI38tKA-rV-DKWK6QY2W15BA_tRyuJBbnn7U67nHH4uqGE772jbzFLrfKVfkU0Avp7MDvOU6TpNVfdX5f4LGdIvoiGDorMHIi0k2m8KfDzD07hqJjfVWDYhK-ajEcTnfUoLomX2&u=https%3a%2f%2frover.ebay.com%2frover%2f1%2f711-213727-13078-0%2f2%3fmpre%3dhttp%253A%252F%252Fwww.ebay.com%252Fitm%252Flike%252F202042873877%26itemid%3d202042873877%26targetid%3d4580909039532283%26device%3dc%26adtype%3d%7badtype%7d%26googleloc%3d%26poi%3d%26campaignid%3d301076558%26adgroupid%3d1236950664938651%26rlsatarget%3dpla-4580909039532283%26abcId%3d1129776%26merchantid%3d51291%26query%3dwhat%2520if%2520i%2520had%2520never%2520tried%2520it%2520valentino%2520rossi%2520the%2520autobiography
- https://www.goodreads.com/book/show/1061188.What_If_I_Had_Never_Tried_It
- http://www.visordown.com/features/products/valentino-rossi-autobiography-review
- https://www.worldcat.org/title/what-if-i-had-never-tried-it-the-autobiography/oclc/813203688
- https://books.google.com/books/about/What_If_I_Had_Never_Tried_It.html?id=VJa4manSH5wC
- https://www.google.com/search?tbo=p&tbm=bks&q=subject
- https://www.amazon.in/What-Had-Never-Tried-Autobiography/dp/076033756X
- https://archive.org/details/whatifihadnevert00ross
- http://go.microsoft.com/fwlink/?LinkID=617350
- http://go.microsoft.com/fwlink/?LinkId=521839&CLCID=0409
- http://go.microsoft.com/fwlink/?LinkID=246338&CLCID=0409
- https://go.microsoft.com/fwlink/?linkid=868922
- http://go.microsoft.com/fwlink/?LinkID=286759&CLCID=409
- http://go.microsoft.com/fwlink/?LinkID=617297
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
font_00_sfnt_off0001032e.bina0b553d1549ac4719b3237109b468f4968ba90bf078f225166559f793e0dae97 |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x1032E | 14488 bytes |
font_01_sfnt_off00012feb.binf349d00983a4862cad6d42d18bea09330819e358fcb6ab2c7a476674fb61e754 |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x12FEB | 10008 bytes |
Open this report in the interactive analyzer, or submit your own file for analysis.