MALICIOUS
60
Risk Score
Malware Insights
MITRE ATT&CK
T1566.002 Spearphishing Attachment
T1204.002 Malicious File
The PDF contains a large number of embedded external links, a technique often used for SEO manipulation or to distribute malicious content. The heuristic 'PDF_SEO_LINK_FARM' directly indicates this behavior. While many of the URLs were marked as benign, the sheer volume and the nature of the heuristic suggest a malicious intent to redirect users to potentially harmful sites or to game search engine rankings. No scripts were extracted from this sample.
Heuristics 2
-
Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARMSmall PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://xiixmcuin.linkpc.net/8202201202200208/Travels-in-Persia-1627-1629-by-Thomas-Herbert.pdf
- http://xiixmcuin.linkpc.net/8202201203200202/Travels-in-Persia-1627-1629-by-Thomas-Herbert-Foster.pdf
- http://xiixmcuin.linkpc.net/6207207205205200/The-Travels-of-Reverend-lafur-Egilsson-The-Story-of-the-Barbary-Corsair-Raid-on-Iceland-in-1627-by-lafur-Egilsson.pdf
- http://xiixmcuin.linkpc.net/8202201204201204/Kalenderblatt-zum-Jahr-1627-Ein-Galvano-M-nzen-von-Litauen-Ungarn-Sachsen-und-sterreich-des-Jahres-1627-by-Joachim-Bonatz.pdf
- http://xiixmcuin.linkpc.net/9208205208209207/Die-L-neburger-Bilderhandschrift-aus-den-Jahren-1807---1808-in-der-Nachzeichnung-von-Herbert-Kn-tel-by-Thomas-Hemmann.pdf
- http://xiixmcuin.linkpc.net/4202204209200202/Dreamer-of-Dune-The-Biography-of-Frank-Herbert-by-Brian-Herbert.pdf
- http://xiixmcuin.linkpc.net/1200203208202201204/Vvits-Priuate-Vvealth-Stored-Vvith-Choyse-Commodities-to-Content-the-Minde-1629-by-Nicholas-Breton.pdf
- http://xiixmcuin.linkpc.net/9200206202207201/Die-Ara-Haslauer-Salzburg-in-Den-Siebziger-Und-Achtziger-Jahren-Herausgegeben-Von-Herbert-Dachs-Ernst-Hanisch-Roland-Floimair-Und-Franz-Schausberger-by-Herbert-Dachs.pdf
- http://xiixmcuin.linkpc.net/4206207209208202/Alexa-s-Travels-A-Prelude-Alexa-s-Travels-0-5-by-Angela-White.pdf
- http://xiixmcuin.linkpc.net/1203201203200200/Prince-of-Persia-by-Jordan-Mechner.pdf
- http://xiixmcuin.linkpc.net/4200206209209206/Gardens-Of-Persia-by-Penelope-Hobhouse.pdf
- http://xiixmcuin.linkpc.net/1205201204200204/Black-Orchid-Blues-by-Persia-Walker.pdf
- http://xiixmcuin.linkpc.net/8202201202201205/IBM-1627-by-Jesse-Russell.pdf
- http://xiixmcuin.linkpc.net/8200208204209/Child-of-the-Northern-Spring-Guinevere-1-by-Persia-Woolley.pdf
- http://xiixmcuin.linkpc.net/6202200205201207/Pearl-of-Persia-Persepolis-by-Homayoon-Amir-Yeganeh.pdf
- http://xiixmcuin.linkpc.net/1205202200209202/Legends-of-Persia-The-Time-for-Alexander-2-by-Jennifer-Macaire.pdf
- http://xiixmcuin.linkpc.net/3201201209203208/Queen-of-the-Summer-Stars-Guinevere-2-by-Persia-Woolley.pdf
- http://xiixmcuin.linkpc.net/6202200204208205/Persepolis-Vegetarian-Recipes-from-Persia-and-Beyond-by-Sally-Butcher.pdf
- http://xiixmcuin.linkpc.net/2205207205203209/Xenophon-s-Retreat-Greece-Persia-and-the-End-of-the-Golden-Age-by-Robin-Waterfield.pdf
- http://xiixmcuin.linkpc.net/9206208201202206/Angel-Chronicles-The-Prince-of-Persia-by-Vincent-Kyere-Kane.pdf
- http://xiixmcuin.linkpc.net/1200203208202201204/Vvits-Priuate-Vvealth-Stored-Vvi
Open this report in the interactive analyzer, or submit your own file for analysis.