MALICIOUS
64
Risk Score
Malware Insights
MITRE ATT&CK
T1566.002 Spearphishing Attachment
T1204.002 Malicious Link
The PDF document contains a large number of external links, identified by the PDF_SEO_LINK_FARM heuristic, which is a common technique for distributing malware or phishing content. One of the embedded URLs, http://sitesworlds.com/fianc/relevent/joyously/ZG93bmxvYWR8ZHczTVRJeVpqRjhmREUyTlRZM056RTRNVGg4ZkRJMU56UjhmQ2hOS1NCeVpXRmtMV0pzYjJjZ1cwWmhjM1FnUjBWT1hR.rupees?MzYgQ2hpbmEgVG93biBISU5ESSBNT1ZJRSB3aXRoIHRvcnJlbnQMzY=samsi/smpte.subsequently, is likely a payload delivery URL. The document body was not sufficiently readable to determine specific lures.
Machine Learning
- Nyx PDF Classifier clean score 0.0060
Heuristics 3
-
Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARMSmall PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://sitesworlds.com/fianc/relevent/joyously/ZG93bmxvYWR8ZHczTVRJeVpqRjhmREUyTlRZM056RTRNVGg4ZkRJMU56UjhmQ2hOS1NCeVpXRmtMV0pzYjJjZ1cwWmhjM1FnUjBWT1hR.rupees?MzYgQ2hpbmEgVG93biBISU5ESSBNT1ZJRSB3aXRoIHRvcnJlbnQMzY=samsi/smpte.subsequently
- https://pes-sa.com/sites/default/files/webform/dr-babasaheb-ambedkar-hindi-movie-full-hd-download.pdf
- https://cambodiaonlinemarket.com/wp-content/uploads/2022/07/HD_Online_Player_David_Attenborough_Africa_1080p_Down.pdf
- https://eventaka.com/wp-content/uploads/2022/07/siahel.pdf
- https://www.pedomanindonesia.com/advert/chembiodraw-14-0-serial-keygen-full/
- https://socialtak.net/upload/files/2022/07/VmpXNVoVtOXg6DwV4Uia_03_79c6bb2c9598ab0dc014ed4daf61ceb1_file.pdf
- https://empleosasugusto.org/wp-content/uploads/2022/07/Ko_To_Tamo_Peva_Ceo_Film_Free_Download_EXCLUSIVE.pdf
- https://scappy.bmde-labs.com/upload/files/2022/07/Ddbrv5mOQVrGSfW7vkBw_03_79c6bb2c9598ab0dc014ed4daf61ceb1_file.pdf
- https://roundabout-uk.com/brazzers-login-e-senha-upd/
- http://www.cpakamal.com/the-curse-of-blackwater-gibz-crack-better/
- https://followgrown.com/upload/files/2022/07/ywtYEZGoTcCD7a62iMzD_03_bddd91d9bd5ba0143f0a36da3e94c45a_file.pdf
- https://shobeklobek.com/easeus-todo-backup-12-0-0-2-crack-work-full-license-code-2020/
- http://theartdistrictdirectory.org/wp-content/uploads/2022/07/Zumba_Fitness_2_PAL_WII_IMARSBy_Renegde_Copytodvd_Compiuter_Hippo_Palmas_Docente.pdf
- https://www.nzangoartistresidency.com/kali-shankar-full-exclusive-movie-720p/
- https://www.rpsnj.org/sites/g/files/vyhlif3731/f/uploads/riverdale_use_of_facilities_form_2019-2020.pdf
- http://www.gatetowellness.com/sites/default/files/webform/pdf2id-35-full-checked.pdf
- https://xenosystems.space/wp-content/uploads/2022/07/rheaemyl.pdf
- https://btr-pen.com/wp-content/uploads/2022/07/heavdebb.pdf
- https://homeimproveinc.com/wp-content/uploads/2022/07/gertaby.pdf
- https://fierce-ravine-48127.herokuapp.com/linaldr.pdf
- https://mykingdomtoken.com/upload/files/2022/07/7PFTxS1h3zUGzcevYVrL_03_79c6bb2c9598ab0dc014ed4daf61ceb1_file.pdf
- http://www.tcpdf.org
- http://www.w3.org/1999/02/22-rdf-syntax-ns#
- http://purl.org/dc/elements/1.1/
- http://ns.adobe.com/xap/1.0/
- http://ns.adobe.com/pdf/1.3/
- http://ns.adobe.com/xap/1.0/mm/
- http://www.aiim.org/pdfa/ns/extension/
- http://www.aiim.org/pdfa/ns/schema#
- http://www.aiim.org/pdfa/ns/property#
- http://www.aiim.org/pdfa/ns/id/
Open this report in the interactive analyzer, or submit your own file for analysis.