MALICIOUS
70
Risk Score
Malware Insights
MITRE ATT&CK
T1059.001 PowerShell
The PDF file contains an external URI pointing to a suspicious download URL, and a heuristic indicates a visual download button lure. ClamAV also detected this file as malware. The presence of these elements suggests the document is designed to trick the user into downloading a malicious payload.
Heuristics 4
-
ClamAV: Pdf.Malware.Agent-9793818-0 critical CLAMAV_DETECTIONClamAV detected this file as malware: Pdf.Malware.Agent-9793818-0
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://uncpbisdegree.com/download3.php?q=spoken-english-1st-edition.pdf
- http://uncpbisdegree.com/download4.php?q=spoken-english-1st-edition.pdf
- http://www.alquranexplorer.com/reads-online/spoken-english-1st-edition.pdf
- http://fluid.cx/spoken/english/spoken_english_1st_edition.pdf
- http://sunsetswimteam.com/reads-online/spoken-english-1st-edition.pdf
- http://bookfreenow.com/download/spoken-english-1st-edition/
- https://www.kutipanberita.com/reads-online/spoken-english-1st-edition.pdf
- http://drcool.de/spoken/english/spoken_english_1st_edition.pdf
- https://www.pearsonelt.com/catalogue/general-english/speakout/first-edition.html
- http://riverside-resort.net/1/strange-true-stories-of-louisiana-kindle-edition-george-w-cable.pdf
- http://riverside-resort.net/1/the-price-of-pleasure-sutherland-brothers-2-kresley-cole.pdf
- http://riverside-resort.net/1/the-bull-from-sea-theseus-2-mary-renault.pdf
- http://riverside-resort.net/1/the-photographer-guid.pdf
- http://riverside-resort.net/1/the-dot-peter-h-reynolds.pdf
- http://riverside-resort.net/1/there-error-while-preparing-your-application-dashboard.pdf
- http://riverside-resort.net/1/thats-what-fashion-is-lessons-and-stories-from-my-nonstop-mostly-glamorous-life-in-style.pdf
- http://riverside-resort.net/1/synaptic-pruning.pdf
- http://riverside-resort.net/1/tettamanti-biochimica-medica-piccin-leningher.pdf
- http://riverside-resort.net/1/the-rise-and-fall-of-the-knights-templar.pdf
- https://www.flipkart.com/spoken-english-1st/p/itmdyu55gxmzugra
- https://41023672.r.bat.bing.com/?ld=d3eYF40XSht9q5565luk0_LTVUCUymHGy-xnKiSoxC6WRd7YctajUMLzSTVwxPct7PghnvFUStNHcshHPSUoNMtZIWcBNNMA8jYkMb-4zfisFvUAOVOXopfug101caJg9byA9S63iAinlfmdqRvbzVD0UnXnHr63kIXAIckuBmnuW4EMIF&u=http%3a%2f%2ftracker.marinsm.com%2frd%3fcid%3dsnl9t30fh0%26lp%3dhttps%3a%2f%2fwww.thriftbooks.com%2fw%2fspoken-english-chinese-edition%2f9968747%2f%3fisbn%3d7501237433%26idiq%3d23848976%2526mkwid%253DHQtBD9yx%257Cdc%2526pcrid%253D11558792766%26utm_source%3dbing%26utm_medium%3dcpc%26utm_campaign%3dBing%2520Shopping%2520%257C%2520Everything%2520Else%26utm_term%3d1101002858882%26utm_content%3dEverything%2520Else
- https://41023672.r.bat.bing.com/?ld=d3kuBVjEXFG1v5jzVdZ0hTjDVUCUzL8LEkhtykTDfk8LF7_LYP0o8Z-erjyL0jraZH2OxGPFIjvOiuFpe00qKKPqxTeyzvX35X0GUYtqQKbKY4NRNCktkf1KUBr1_tGthGNk-hlo965tMwQt1xgBYKBUYIMkPNtgB-i_dRdjLo-K9Rc75O&u=http%3a%2f%2ftracker.marinsm.com%2frd%3fcid%3dsnl9t30fh0%26lp%3dhttps%3a%2f%2fwww.thriftbooks.com%2fw%2fspoken-american-english-elementary-course-japanese-edition%2f8311585%2f%3fisbn%3d4327440396%26idiq%3d2932403%2526mkwid%253DHQtBD9yx%257Cdc%2526pcrid%253D11558792766%26utm_source%3dbing%26utm_medium%3dcpc%26utm_campaign%3dBing%2520Shopping%2520%257C%2520Everything%2520Else%26utm_term%3d1101002858882%26utm_content%3dEverything%2520Else
- https://2176481.r.bat.bing.com/?ld=d3JVCFSk8OEakk8iT0qQqoeTVUCUzqGvDrDBdPIjgv-7Swdp1s8cqdnMWpIhg9Sk0MJlUYGf0BtuCiE7_wuGt6tXxWJFQtsl0w1YgGmrIIaikQON5B9GYLAsJFsMqWTUuoWEC28N2hj9ky6ADF0itKNHcHoM4SRbgRofQ2BCMCABzOhd4g&u=http%3a%2f%2frd.bizrate.com%2frd2%3ft%3dhttps%253A%252F%252Fwww.americanbookwarehouse.com%252F181181%252F%26mid%3d295556%26catId%3d8018%26prodId%3d7160372666%26pos%3d0%26lg%3d0%26bAmt%3d48cd9202db195e9b%26ppr%3daff06488909d0db5%26oid%3d7160372666%26atom%3d10122%26bidType%3d9%26bId%3d17%26cobrand%3d1%26mpid%3d181181%26countryCode%3dUS%26rf_code%3dbpl%26adgroupID%3d8%26af_rid%3dc%3ao%3apla-1101805663616
- https://0.r.bat.bing.com/?ld=d33eZOkGNeOJvw20rKce1kwDVUCUyEMZzCd_nzN2pWDVRkuQTb1vYuwl1Qi9ZwSoNog5eVa9f8xPodokT7HuZqpE12VsiXzQNlA9wKQgGch74d_5-NX7otWd0PKz5jxPUc64K34BwybY_BVSnp0fWNJytJa2WdZiaZz1dpdSGaGQ-0PZIR&u=http%3a%2f%2ftracker.marinsm.com%2frd%3fcid%3dvkkb7e0xh0%26mkwid%3dKqE0sPs7%26pcrid%3d73392450956934%26pdv%3dc%26lp%3dhttps%3a%2f%2fwww.abebooks.com%2fLongman-Student-Grammar-Spoken-Written-English%2f22698777951%2fbd%3fcm_mmc%3dmsn-_-used-_-PLA-_-v01%2526cm_mmc%253Dmsn-_-Bing%252BUS%252BShopping-_-Ad%252Bgroup%252B%2525231-_-%7bproduct_groups%7d
- https://41023672.r.bat.bing.com/?ld=d3eooKjOAT71-PqaH9xCcemzVUCUz1EdrWyKgojBljbsdkdH37WefUw5Jj_irF68yOjmab3v7ZP-GC-N47LdMzp7yuSIJoe_BFA4wvqPDMvPxw782vXqc4Y2HFjZPq4SovGmiPvi4V3g6DoF1_9FaoKIp68b0ws6tDpDjHZT9S7q0_VJFl&u=http%3a%2f%2ftracker.marinsm.com%2frd%3fcid%3dsnl9t30fh0%26lp%3dhttps%3a%2f%2fwww.thriftbooks.com%2fw%2fspoken-american-english-introductory-course-japanese-edition%2f8878108%2f%3fisbn%3d4327440388%26idiq%3d16926840%2526mkwid%253DHQtBD9yx%257Cdc%2526pcrid%253D11558792766%26utm_source%3dbing%26utm_medium%3dcpc%26utm_campaign%3dBing%2520Shopping%2520%257C%2520Everything%2520Else%26utm_term%3d1101002858882%26utm_content%3dEverything%2520Else
- https://www.abebooks.com/book-search/title/a-history-of-the-english-speaking-peoples/first-edition/
- https://en.wikipedia.org/wiki/List_of_languages_by_total_number_of_speakers
- https://www.amazon.com/Longman-Student-Grammar-Written-English/dp/0582237262
- https://www.amazon.com/books-used-books-textbooks/b?ie=UTF8&node=283155
- https://www.amazon.com/Education-Reference-Books/b?ie=UTF8&node=21
- https://www.amazon.com/Words-Language-Reference-Books/b?ie=UTF8&node=11970
- https://en.wikipedia.org/wiki/History_of_the_English_language
- https://en.wikipedia.org/wiki/History_of_the_English_language#Proto-English
- https://en.wikipedia.org/wiki/History_of_the_English_language#Old_English
- https://en.wikipedia.org/wiki/History_of_the_English_language#Middle_English
- https://en.wikipedia.org/wiki/History_of_the_English_language#Early_Modern_English
- http://go.microsoft.com/fwlink/?LinkID=617350
- http://go.microsoft.com/fwlink/?LinkId=521839&CLCID=0409
- http://go.microsoft.com/fwlink/?LinkID=246338&CLCID=0409
- https://go.microsoft.com/fwlink/?linkid=868922
- http://go.microsoft.com/fwlink/?LinkID=286759&CLCID=409
- http://go.microsoft.com/fwlink/?LinkID=617297
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
font_00_sfnt_off0000c9cc.bin65d90f4fd2d6803cc5a657aa40b660b99f987c5cb0e6e83a98d0e60239e2925d |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xC9CC | 14148 bytes |
font_01_sfnt_off0000f532.bin2ebac17c604e75d59bc2ff8e7dacbc23fb299bd5d9b5e483415016da378e85d0 |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xF532 | 10464 bytes |
Open this report in the interactive analyzer, or submit your own file for analysis.