PDF / .VIR static analysis report

Static analysis result for SHA-256 b4b339bbacf690ac…

CLEAN

PDF / .VIR

109.8 KB Created: 2024-12-18 00:00:37 +00:00 Authoring application: mPDF 7.1.6 First seen: 2024-12-23
MD5: 33a3b2f57a18a5969ec3571494a8453a SHA-1: e69e14a14cec8dd73237be8e87fbe487aea78b9e SHA-256: b4b339bbacf690ac6c7544c74c6c2b8628a5a48673b1ba852623d100f861321c
4 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0003

Heuristics 2

  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL https://lowmp3.com/electronic/267647-mac-thornhill-love-interlude.html PDF link annotation
    • https://lowmp3.com/file.php?fn=TWFjIFRob3JuaGlsbCAtIExvdmUgSW50ZXJsdWRlIChNUDMp&a=cmFy&s=MTczOSBtYg==&i=L2ltYWdlcy9ub2ltYWdlLmpwZw==&h=bG93TVAzLmNvbQ==In PDF document text
    • https://lowmp3.com/file.php?fn=TWFjIFRob3JuaGlsbCAtIExvdmUgSW50ZXJsdWRlIChGTEFDKQ%3D%3D&a=cmFy&s=MTQxOSBtYg==&i=L2ltYWdlcy9ub2ltYWdlLmpwZw==&h=bG93TVAzLmNvbQ==In PDF document text
    • https://lowmp3.com/file.php?fn=TWFjIFRob3JuaGlsbCAtIExvdmUgSW50ZXJsdWRlIChXTUEp&a=cmFy&s=MTIwOSBtYg==&i=L2ltYWdlcy9ub2ltYWdlLmpwZw==&h=bG93TVAzLmNvbQ==In PDF document text
    • https://lowmp3.com/file.php?fn=TWFjIFRob3JuaGlsbCAtIExvdmUgSW50ZXJsdWRl&a=bXAz&s=MTczOSBtYg==&i=L2ltYWdlcy9ub2ltYWdlLmpwZw==&h=bG93TVAzLmNvbQ==In PDF document text
    • https://lowmp3.com/reggae/225077-hawkeyestress.pdfIn PDF document text
    • https://lowmp3.com/reggae/179812-dr-victor-stress.pdfIn PDF document text
    • https://lowmp3.com/hip-hop/157443-kartellen-am43-stress-remix.pdfIn PDF document text
    • https://lowmp3.com/rock/147863-stompbox-stress.pdfIn PDF document text
    • https://lowmp3.com/hip-hop/95770-villains-gotta-get-the-cashstress.pdfIn PDF document text
    • https://lowmp3.com/rock/56675-tough-love-stress.pdfIn PDF document text
    • https://lowmp3.com/hip-hop/50884-dj-gruff-zero-stress.pdfIn PDF document text
    • https://lowmp3.com/hip-hop/28690-lakmann-2-gramm-gegen-den-stress.pdfIn PDF document text
    • https://lowmp3.com/electronic/2741-zeena-gulzar-stress.pdfIn PDF document text
    • https://lowmp3.com/reggae/2274-anthony-b-kanangafun-timestress.pdfIn PDF document text
    • http://dejavu.sourceforge.netIn extracted file (stream_003_off000023a1.bin)
    • http://dejavu.sourceforge.net/wiki/index.php/LicenseIn extracted file (stream_003_off000023a1.bin)
🗂 Part of campaign: secureserver.net 1471 samples

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 3

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_003_off000023a1.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x23A1 19824 bytes
SHA-256: b5a056ebcfa63b81c85d4fd1ac3bc6fe76845c50664add9735242967184c2e9d
font_01_sfnt_off00005770.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x5770 19964 bytes
SHA-256: 5154a7c8cf7a9b55c2f939ad6a4a8f8327cd6552b9f68a87c49d10dfc747eaa8
font_02_sfnt_off00008b88.bin pdf-font-stream PDF embedded font (sfnt) at offset 0x8B88 20828 bytes
SHA-256: 66ee5a421be874c2bf64758e212dcdc74f7e5fbd5b562db26553446e87a084f1

Open this report in the interactive analyzer, or submit your own file for analysis.