MALICIOUS
94
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
The PDF contains a link farm advertising cracked software, with numerous URLs pointing to potentially malicious sites. The PDF_SEO_LINK_FARM heuristic indicates a large number of external links, and the PDF_CRACKED_SOFTWARE_LURE heuristic confirms the nature of the advertised content. While no scripts were extracted, the primary attack pattern involves directing users to download malicious software via these links.
Machine Learning
- Nyx PDF Classifier clean score 0.0137
Heuristics 4
-
Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARMSmall PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
-
PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LUREPDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://hardlyfind.com/harkened/ZG93bmxvYWR8bnUxTm5KelkzeDhNVFkxTmpnNU1qTTFNbng4TWpVM05IeDhLRTBwSUhKbFlXUXRZbXh2WnlCYlJtRnpkQ0JIUlU1ZA.druid/enhancedhealing/healthtalk/feduc/TGl2ZSBPcmJpdGFsIFdhbGxwYXBlcnMTGl.fuentes?part PDF link annotation
- https://ipayif.com/upload/files/2022/07/fy5odBdg2f9MPTfrcide_04_39f3a1a785d6e08f3cf7321e1fe4aab6_file.pdfIn PDF document text
- https://theludwigshafen.com/magic-aac-to-mp3-converter-crack-serial-number-full-torrent-free-x64-2022/In PDF document text
- https://www.periodicoelapogeo.com.ar/site/advert/spelling-bee-crack-license-key-full-latest/In PDF document text
- https://www.realvalueproducts.com/sites/realvalueproducts.com/files/webform/raymar291.pdfIn PDF document text
- https://geto.space/upload/files/2022/07/dx6UP9jlidOzmKRkcrfi_04_51886c7f92aaa3d238deb559c3b222f3_file.pdfIn PDF document text
- https://colonialrpc.com/advert/desktop-launcher-and-communicator-crack-torrent/In PDF document text
- https://dragalacoaching1.com/aumbi-crack-free-download/In PDF document text
- https://kate-mobilez.ru/ssh-edit-crack-free-mac-win.htmlIn PDF document text
- https://technospace.co.in/upload/files/2022/07/1SqSowg7b3XXFejp5Z6b_04_aa8a8cd54a3a53a9de49abda95ace668_file.pdfIn PDF document text
- https://axisflare.com/upload/files/2022/07/FQMyjJCX7SFxmzqyzIAe_04_39f3a1a785d6e08f3cf7321e1fe4aab6_file.pdfIn PDF document text
- http://radialamoladora.com/?p=3336In PDF document text
- http://adomemorial.com/2022/07/04/ivolume-9-5-0-5-crack-activator-free-download-latest-2/In PDF document text
- https://kalapor.com/ipixsoft-gif-to-swf-converter-crack-license-code-keygen-free-download-latest-2022/In PDF document text
- http://quitoscana.it/2022/07/04/taksi-2-4-4-crack-for-pc/In PDF document text
- http://www.trabajosfacilespr.com/advance-elite-adware-removal-tool-crack-with-license-key-pc-windows/In PDF document text
- https://himoin.com/upload/files/2022/07/EqTSvWHOwuYeUz1vyJmz_04_51886c7f92aaa3d238deb559c3b222f3_file.pdfIn PDF document text
- https://worlegram.com/upload/files/2022/07/Gbw1QgDKp1YxVMhAZo5G_04_39f3a1a785d6e08f3cf7321e1fe4aab6_file.pdfIn PDF document text
- https://khaosod.us/classified/advert/downgramer-license-key-latest/In PDF document text
- https://soulattorney.com/geeksnerds-xfs-datarecovery-torrent-free-x64/In PDF document text
- https://ipayif.com/upload/files/2022/07/fy5odBdg2f9MPTfrcide_04_39f3aIn PDF document text
- https://theludwigshafen.com/magic-aac-to-mp3-converter-crack-serial-In PDF document text
- https://www.periodicoelapogeo.com.ar/site/advert/spelling-bee-crack-In PDF document text
- https://www.realvalueproducts.com/sites/realvalueproducts.com/files/wIn PDF document text
- https://geto.space/upload/files/2022/07/dx6UP9jlidOzmKRkcrfi_04_5188In PDF document text
- https://colonialrpc.com/advert/desktop-launcher-and-communicator-In PDF document text
- https://technospace.co.in/upload/files/2022/07/1SqSowg7b3XXFejp5Z6bIn PDF document text
- https://axisflare.com/upload/files/2022/07/FQMyjJCX7SFxmzqyzIAe_04_3In PDF document text
- http://adomemorial.com/2022/07/04/ivolume-9-5-0-5-crack-activator-In PDF document text
- https://kalapor.com/ipixsoft-gif-to-swf-converter-crack-license-code-In PDF document text
- http://www.trabajosfacilespr.com/advance-elite-adware-removal-tool-In PDF document text
- https://himoin.com/upload/files/2022/07/EqTSvWHOwuYeUz1vyJmz_04_In PDF document text
- https://worlegram.com/upload/files/2022/07/Gbw1QgDKp1YxVMhAZo5GIn PDF document text
- https://wakelet.com/wake/feVp3NEFbHDEHuJFMyQQ5In PDF document text
- http://www.tcpdf.orgIn PDF document text
- http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
- http://purl.org/dc/elements/1.1/In PDF document text
- http://ns.adobe.com/xap/1.0/In PDF document text
- http://ns.adobe.com/pdf/1.3/In PDF document text
- http://ns.adobe.com/xap/1.0/mm/In PDF document text
- http://www.aiim.org/pdfa/ns/extension/In PDF document text
- http://www.aiim.org/pdfa/ns/schema#In PDF document text
- http://www.aiim.org/pdfa/ns/property#In PDF document text
- http://www.aiim.org/pdfa/ns/id/In PDF document text
Open this report in the interactive analyzer, or submit your own file for analysis.