MALICIOUS
90
Risk Score
Malware Insights
MITRE ATT&CK
T1566.002 Spearphishing Attachment
T1059.001 PowerShell
The PDF contains a large number of embedded external links, a technique often used for SEO manipulation or to distribute malicious payloads. The ML classifier strongly indicated maliciousness. While the document body was heavily obfuscated, the presence of numerous URLs suggests a distribution or redirection mechanism. No scripts were extracted, limiting further analysis of direct execution.
Machine Learning
- Nyx PDF Classifier malicious score 0.9925
Heuristics 2
-
Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARMSmall PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://seasasac.lflinkup.com/4da2da5da0da9da8/Hello-Kitty-Hello-New-York-by-Sanrio.pdf
- http://seasasac.lflinkup.com/2da3da3da0da1da1/Kitty-Kitty-Bad-Kitty-2-by-Michele-Jaffe.pdf
- http://seasasac.lflinkup.com/2da0da5da7da3da1/Kitty-s-House-of-Horrors-Kitty-Norville-7-by-Carrie-Vaughn.pdf
- http://seasasac.lflinkup.com/1da3da1da9da3da7/Kitty-Rocks-the-House-Kitty-Norville-11-by-Carrie-Vaughn.pdf
- http://seasasac.lflinkup.com/1da3da1da7da1da7/Kitty-Steals-the-Show-Kitty-Norville-10-by-Carrie-Vaughn.pdf
- http://seasasac.lflinkup.com/1da3da2da1da7da1/Kitty-in-the-Underworld-Kitty-Norville-12-by-Carrie-Vaughn.pdf
- http://seasasac.lflinkup.com/1da3da1da4da0da2/Kitty-s-Big-Trouble-Kitty-Norville-9-by-Carrie-Vaughn.pdf
- http://seasasac.lflinkup.com/3da7da7da8da1da5/Here-Kitty-Kitty-by-Sara-Bell.pdf
- http://seasasac.lflinkup.com/3da1da4da1da2da7/Kitty-Peck-and-the-Music-Hall-Murders-Kitty-Peck-1-by-Kate-Griffin.pdf
- http://seasasac.lflinkup.com/1da0da8da1da5da3da9/New-York-New-York-Masterworks-of-a-Street-Peddler-George-Forss-by-David-Douglas-Duncan.pdf
- http://seasasac.lflinkup.com/2da7da4da9da8da8/The-New-York-Times---Special-Edition---Saturday-July-4th-2009-by-The-New-York-Times.pdf
- http://seasasac.lflinkup.com/7da7da9da9da5da8/Bernice-Abbott-New-York-Photographs-from-the-Museum-of-the-City-of-New-York-by-Berenice-Abbott.pdf
- http://seasasac.lflinkup.com/8da8da5da0da0da5/The-Jews-of-New-York-in-the-Arts-Sciences-and-Professions-Address-Before-the-Judaean-Society-on-the-Occasion-of-Its-Celebration-of-the-250th-Anniversary-on-the-Settlement-of-the-Jews-in-New-York-Hotel-Savoy-April-29th-1905-by-Leon-Huhner.pdf
- http://seasasac.lflinkup.com/2da7da5da0da6da5/Writers-on-Writing-Collected-Essays-from-The-New-York-Times-by-The-New-York-Times.pdf
- http://seasasac.lflinkup.com/1da9da9da5da8da8/The-Rose-of-York-Love-amp-War-The-Rose-of-York-Trilogy-1-by-Sandra-Worth.pdf
- http://seasasac.lflinkup.com/1da3da2da6da3da9/Big-Sky-by-Kitty-Thomas.pdf
- http://seasasac.lflinkup.com/5da5da5da8da2da1/Disinfection-of-Rags-Communication-of-the-Health-Officer-of-the-Port-of-New-York-to-the-New-York-City-Board-of-Health-in-Relation-to-the-Regulation-Requiring-the-Disinfection-of-Foreign-Rags-by-William-Mervale-Smith.pdf
- http://seasasac.lflinkup.com/2da0da6da5da2da2/Wanderlust-by-Kitty-French.pdf
- http://seasasac.lflinkup.com/2da9da0da3da6da8/Persephone-by-Kitty-Thomas.pdf
- http://seasasac.lflinkup.com/4da1da3da4da6da3/Persephone-by-Kitty-Thomas.pdf
- http://seasasac.lflinkup.com/1da0da8da1da5da3da9/New-York-New-York-Masterworks-of-a-Street-Peddler-George-Forss-by-David-Dougla
Open this report in the interactive analyzer, or submit your own file for analysis.