Malicious PDF — malware analysis report

Heuristics 5

• Cracked-software lure uses download-gateway redirectors high PDF_CRACKED_SOFTWARE_REDIRECTOR_LINK_FARM
  PDF contains multiple cracked-software/keygen/serial-key lure links together with long encoded download-gateway URLs or known crack-download redirector hosts. This is stronger than generic piracy vocabulary: the document is an SEO lure that funnels users through redirect/download infrastructure commonly used for adware, unwanted software, or droppers.
• PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LURE
  PDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
• Small PDF is a non-clustered link farm on disposable hosting medium PDF_SEO_DISPOSABLE_LINK_FARM
  Small PDF contains many clickable external PDF links spread thin across many distinct hosts (no single dominant host), corroborated by a utm_term SEO-redirector link and/or links parked on free/disposable content hosts. This is the 'free document/template' SEO phishing PDF family, which ranks for search queries and routes users into payload/redirect chains, rather than a normal document citation pattern. The PDF itself carries no exploit — the risk is the linked destinations.
• External URI info PDF_URI
  PDF contains an external URL action
• Embedded URL info EMBEDDED_URL
  One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
  URL http://godsearchs.com/centrifuge.ZG93bmxvYWR8SkE3YTJ0cGRYeDhNVFkyTWpZNE1ETTVNSHg4TWpVNU1IeDhLRTBwSUZkdmNtUndjbVZ6Y3lCYldFMU1VbEJESUZZeUlGQkVSbDA/camshafts=groin/U29taWMgRzkyNyBQcm8gRHJpdmVyU29=moranbah/basis PDF link annotation

  • https://papayu.co/malwarebytes-anti-malware-premium-v2-2-0-1024-final-patch-lifetime/In PDF document text
  • https://homehealthcarelist.com/wp-content/uploads/2022/09/balwil.pdfIn PDF document text
  • http://franklinpanama.com/kabhi-up-kabhi-down-full-movie-in-indonesia-subtitle-download-better/In PDF document text
  • https://sandylaneestatebeachclub.com/wp-content/uploads/2022/09/Download_Game_Need_For_Speed_Most_Wanted_Full_Version_For_22_CRACKED.pdfIn PDF document text
  • http://phatdigits.com/?p=21911In PDF document text
  • https://liquidonetransfer.com.mx/?p=113470In PDF document text
  • http://connect.tg/wp-content/uploads/2022/09/devlmar.pdfIn PDF document text
  • https://walter-c-uhler.com/sims-3-highly-compressed-100mb-download-better/In PDF document text
  • https://carolwestfineart.com/wp-content/uploads/2022/09/VERIFIED_FreeDownloadDomiCardzip.pdfIn PDF document text
  • https://streetbazaaronline.com/2022/09/10/gta-liberty-city-stories-game-free-download-for-pc-full-version-hot/In PDF document text
  • https://xn--80aab1bep0b6a.online/wp-content/uploads/chehar.pdfIn PDF document text
  • https://loskutbox.ru/wp-content/uploads/2022/09/benjaem.pdfIn PDF document text
  • https://www.cubius.fr/gta-5-full-version-free-download-cnet-upd/In PDF document text
  • https://afribizkid.africa/wp-content/uploads/2022/09/anno_1404_trainer_103365015.pdfIn PDF document text
  • https://bali.live/wp-content/uploads/2022/09/Sniper_Ghost_Warrior_2_Msvcr100dll_Is_Missing_Errorl_WORK.pdfIn PDF document text
  • https://protelepilotes.com/wp-content/uploads/2022/09/saereb.pdfIn PDF document text
  • https://cryptotalkcentral.com/feel-the-flash-hardcore-kasumi-_best_/In PDF document text
  • https://hard-times.us/wp-content/uploads/2022/09/software_x431_masterrar.pdfIn PDF document text
  • http://www.jbdsnet.com/activation-windows-8-1-kmsmicro-v5-0-1-zip-127-mb-441/In PDF document text
  • https://silkfromvietnam.com/gulliver-s-travel-hindi-movie-with-torrent-full/In PDF document text
  • https://sandylaneestatebeachclub.com/wp-content/uploads/2022/09/Download_Game_Need_For_SpeIn PDF document text
  • https://streetbazaaronline.com/2022/09/10/gta-liberty-city-stories-game-free-download-for-pc-full-In PDF document text
  • https://bali.live/wp-In PDF document text
  • https://sandylaneestatebeachclub.com/wp-content/uploads/2022/09/download_game_need_for_speed_most_wanted_full_version_for_22_cracked.pdfIn PDF document text
  • http://godsearchs.com/centrifuge.zg93bmxvywr8ske3ytj0cgryedhnvfkytwpzne1ettvnshg4twpvnu1iedhlrtbwsuzkdmntundjbvz6y3lcyldfmu1vbejesuzzeulgqkvsbda/camshafts=groin/u29tawmgrzkynybqcm8grhjpdmvyu29=moranbah/basisIn PDF document text
  • http://www.tcpdf.orgIn PDF document text
  • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
  • http://purl.org/dc/elements/1.1/In PDF document text
  • http://ns.adobe.com/xap/1.0/In PDF document text
  • http://ns.adobe.com/pdf/1.3/In PDF document text
  • http://ns.adobe.com/xap/1.0/mm/In PDF document text
  • http://www.aiim.org/pdfa/ns/extension/In PDF document text
  • http://www.aiim.org/pdfa/ns/schema#In PDF document text
  • http://www.aiim.org/pdfa/ns/property#In PDF document text
  • http://www.aiim.org/pdfa/ns/id/In PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.