Malicious PDF — malware analysis report

Heuristics 5

• Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
  Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
• Cracked-software lure uses download-gateway redirectors high PDF_CRACKED_SOFTWARE_REDIRECTOR_LINK_FARM
  PDF contains multiple cracked-software/keygen/serial-key lure links together with long encoded download-gateway URLs or known crack-download redirector hosts. This is stronger than generic piracy vocabulary: the document is an SEO lure that funnels users through redirect/download infrastructure commonly used for adware, unwanted software, or droppers.
• PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LURE
  PDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
• External URI info PDF_URI
  PDF contains an external URL action
• Embedded URL info EMBEDDED_URL
  One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
  URL http://thedirsite.com/buzzles.ZG93bmxvYWR8WmsxTW1scmFueDhNVFkzTVRVME5qUXdOM3g4TWpVNU1IeDhLRTBwSUZkdmNtUndjbVZ6Y3lCYldFMU1VbEJESUZZeUlGQkVSbDA/cozzie.fabio/impoverishment.dispensing/.aW1zYWkgYXJhc2FuIDIzYW0gcHVsaWtlc2kgNzIwcCAyOQaW1 PDF link annotation

  • https://player.soundon.fm/p/John-Maxwell-Incepe-Sa-Gandesti-Pdf-Download--bapeIn PDF document text
  • https://player.soundon.fm/p/Xbox-360-Emulator-32-6-Download-EXCLUSIVE-For-ovodIn PDF document text
  • https://player.soundon.fm/p/Download-SIEMENS-SIMATIC-PCS-7-V70-SP2-Torren-sussIn PDF document text
  • https://player.soundon.fm/p/TSplinesForRhino5Crack97-CRACKED-elsnorlusttareIn PDF document text
  • https://player.soundon.fm/p/Nero-Burning-ROM-2018-18011800-FINAL-rar-satfeunidIn PDF document text
  • https://player.soundon.fm/p/Cpa-Sim-Analyzerrar-LINK-cerrirusliocheIn PDF document text
  • https://player.soundon.fm/p/Download-Games-Diner-Dash-Hometown-Hero-Full--longIn PDF document text
  • https://player.soundon.fm/p/CRACK-Luminar-2018-V1322677-Keygen-CracksMind-erinIn PDF document text
  • https://player.soundon.fm/p/Bulk-Domain-Checker-Whois-Lookup-Nulledl-UPDA-badcIn PDF document text
  • https://player.soundon.fm/p/Ps2emu-Alpha-With-Plugin-And-Bios-Download-33-urouIn PDF document text
  • https://player.soundon.fm/p/Calculations-In-Aas-Level-Chemistry-By-Jim-Cl-precIn PDF document text
  • https://player.soundon.fm/p/Pokemon-Reborn-Weather-Mod-TOP-maphadestrizeIn PDF document text
  • https://player.soundon.fm/p/Zenith-english-Gengoroh-Tagame-Added-By-28-nombderIn PDF document text
  • https://player.soundon.fm/p/Whatsup-Gold-Premium-V15-0-FULL-Cracked-Rar-charteIn PDF document text
  • https://player.soundon.fm/p/TISmartView-Trial-With-Crack-TOP-globamizmentuIn PDF document text
  • https://208whoisgreat.com/wp-content/uploads/2022/12/zevval.pdfIn PDF document text
  • https://hgpropertysourcing.com/wp-content/uploads/2022/12/Tafsir-Al-Munir-Wahbah-Zuhaili-Pdf-Downloadgolkes-HOT.pdfIn PDF document text
  • https://boatripz.com/wp-content/uploads/2022/12/latberw.pdfIn PDF document text
  • https://www.solaiocompound.it/wp-content/uploads/2022/12/cerecha.pdfIn PDF document text
  • https://mentoring4good.com/wp-content/uploads/2022/12/hilgha.pdfIn PDF document text
  • http://transserver.net/?p=30699In PDF document text
  • https://zeroimpact-event.com/wp-content/uploads/2022/12/Orgplus-6-Professional-500-Crack-REPACK-Cocaine.pdfIn PDF document text
  • http://hexacon.pe/quite-imposing-mac-serial-number-portable/In PDF document text
  • https://almet-sale.ru/wp-content/uploads/2022/12/hero-fighter-x-hacked-all-charac-verified.pdfIn PDF document text
  • https://www.webcard.irish/suryathemovieenglishsubdownload-link/In PDF document text
  • https://hassadlifes.com/mtk-nvram-editor-rargolkesl/In PDF document text
  • https://newsafrica.world/2022/12/maha-sankalpam-in-telugu-pdf-new/In PDF document text
  • http://www.kenyasdgscaucus.org/?p=38153In PDF document text
  • https://www.asdnocincorsa.it/wp-content/uploads/2022/12/Download-NEW-The-Amazing-Spider-Man-2-Android-Offline.pdfIn PDF document text
  • http://www.caribbeanequipmenttraders.com/wp-content/uploads/2022/12/Globe-Broadband-Driver-Free-HOT-Download.pdfIn PDF document text
  • http://romeroconsult.com/wp-content/uploads/2022/12/vijnorse-1.pdfIn PDF document text
  • https://bodhirajabs.com/full-2021-download-edius-pro-6-5-cracked-version-key-and/In PDF document text
  • https://6v9x.com/download-2021-film-jurassic-park-3-subtitle-indonesia/In PDF document text
  • https://navigayte.com/wp-content/uploads/Download-Saawariya-Hd-Movie-Torrent-FULL.pdfIn PDF document text
  • https://www.happy-energy.it/wp-content/uploads/2022/12/emmnjab.pdfIn PDF document text
  • https://hgpropertysourcing.com/wp-content/uploads/2022/12/Tafsir-Al-Munir-Wahbah-Zuhaili-Pdf-DoIn PDF document text
  • https://zeroimpact-event.com/wp-content/uploads/2022/12/Orgplus-6-Professional-500-Crack-REPACIn PDF document text
  • https://www.asdnocincorsa.it/wp-content/uploads/2022/12/Download-NEW-The-Amazing-Spider-ManIn PDF document text
  • http://www.caribbeanequipmenttraders.com/wp-content/uploads/2022/12/Globe-Broadband-Driver-FIn PDF document text
  • https://player.soundon.fm/p/crack-luminar-2018-v1322677-keygen-cracksmind-erinIn PDF document text
  • http://thedirsite.com/buzzles.zg93bmxvywr8wmsxtw1scmfuedhnvfkztvrvme5quxdom3g4twpvnu1iedhlrtbwsuzkdmntundjbvz6y3lcyldfmu1vbejesuzzeulgqkvsbda/cozzie.fabio/impoverishment.dispensing/.aw1zywkgyxjhc2fuidizyw0gchvsawtlc2kgnziwccayoqaw1In PDF document text
  • http://dejavu.sourceforge.netFontsIn extracted file (font_02_sfnt_off0000b90d.bin)
  • http://dejavu.sourceforge.netIn extracted file (stream_008_off0000515a.bin)
  • http://dejavu.sourceforge.net/wiki/index.php/LicenseIn extracted file (stream_008_off0000515a.bin)
  • http://dejavu.sourceforge.net/wiki/index.php/LicenseDejaVuIn extracted file (font_02_sfnt_off0000b90d.bin)

Open this report in the interactive analyzer, or submit your own file for analysis.