MALICIOUS
64
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
T1204.002 Malicious Link
The PDF document contains a large number of embedded external links, a technique often used for SEO spam or to distribute malicious payloads. The heuristic 'PDF_SEO_LINK_FARM' specifically flags this behavior, indicating a potential attempt to drive traffic to various websites. The primary IOC is the external URI pointing to 'bestsmartfind.com', which is likely part of this link farm.
Machine Learning
- Nyx PDF Classifier clean score 0.0139
Heuristics 3
-
Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARMSmall PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://bestsmartfind.com/clec/ZG93bmxvYWR8MjlRWXpVd01IeDhNVFkxTmpnNU1qTTFNbng4TWpVM05IeDhLRTBwSUhKbFlXUXRZbXh2WnlCYlJtRnpkQ0JIUlU1ZA.goods?mughal=/THVsdQTHV/martina.maslikov&jardiniere=mayem
- https://thecryptobee.com/pdfmergesplittool-crack-march-2022/
- https://theangelicconnections.com/stuka-1-0-9-crack-activation-code-free-for-windows/
- https://www.huarenshifu.com/ocaml-free-download-3264bit/
- https://www.thepostermafia.com/2022/07/04/encrypted-notepad-crack-product-key-full-2022-new/
- https://wozyzy.com/upload/files/2022/07/wQv2SuR6M3ylep21L9QK_04_3e84a827991197d1ada12379e3e68ed5_file.pdf
- https://mia.world/upload/files/2022/07/Vp4FUvtaoTQWcpj5W9UX_04_3e84a827991197d1ada12379e3e68ed5_file.pdf
- https://mandarinrecruitment.com/system/files/webform/email-extractor.pdf
- https://bluesteel.ie/2022/07/04/large-people-icons-2022-new/
- http://www.flyerbee.com/?p=180407
- https://www.cameraitacina.com/en/system/files/webform/feedback/microsoft-office-mac-icons.pdf
- https://www.lemiesoftskills.com/wp-content/uploads/2022/07/Free_PDF_Split_Crack__.pdf
- https://mentoring4good.com/wp-content/uploads/2022/07/Free_Light_Timer__Keygen_For_LifeTime_For_Windows.pdf
- https://startacting.ru/?p=19568
- http://knowthycountry.com/?p=7088
- https://www.slas.lk/advert/spybuster-ransomware-removal-crack-mac-win-2022/
- https://germanconcept.com/text-comparator-crack-win-mac/
- https://wozyzy.com/upload/files/2022/07/wQv2SuR6M3ylep21L9QK_04_3e84a827991197d1ada1237
- https://mia.world/upload/files/2022/07/Vp4FUvtaoTQWcpj5W9UX_04_3e84a827991197d1ada12379e
- https://mentoring4good.com/wp-
- https://mugvn.s3.amazonaws.com/upload/files/2022/07/7yH2oxqpTssOvJdrOSqX_04_01117248a44dce6a1a4cd1d72cf72cd2_file.pdf
- http://wertoro.yolasite.com/resources/LAN-Tornado-Crack--Activator-Free-Download.pdf
- http://petabty.yolasite.com/resources/Total-Copier--With-Key.pdf
- https://wakelet.com/wake/FP3bBOitI188HFEvSUKpP
- http://www.tcpdf.org
- https://mugvn.s3.amazonaws.com/upload/files/2022/07/7yH2oxqpTssOvJdrOSqX_04_01117248a44dc
- http://www.w3.org/1999/02/22-rdf-syntax-ns#
- http://purl.org/dc/elements/1.1/
- http://ns.adobe.com/xap/1.0/
- http://ns.adobe.com/pdf/1.3/
- http://ns.adobe.com/xap/1.0/mm/
- http://www.aiim.org/pdfa/ns/extension/
- http://www.aiim.org/pdfa/ns/schema#
- http://www.aiim.org/pdfa/ns/property#
- http://www.aiim.org/pdfa/ns/id/
Open this report in the interactive analyzer, or submit your own file for analysis.