MALICIOUS
94
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
The PDF contains a link farm that advertises cracked software, indicating a lure for potentially unwanted content. The presence of numerous external URLs, including one pointing to a potential download, suggests the primary goal is to redirect users to malicious or deceptive sites. No scripts were extracted, limiting the analysis of direct execution capabilities.
Machine Learning
- Nyx PDF Classifier clean score 0.0060
Heuristics 4
-
Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARMSmall PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
-
PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LUREPDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://sitesworlds.com/fianc/relevent/joyously/ZG93bmxvYWR8ZHczTVRJeVpqRjhmREUyTlRZM056RTRNVGg4ZkRJMU56UjhmQ2hOS1NCeVpXRmtMV0pzYjJjZ1cwWmhjM1FnUjBWT1hR.rupees?MzYgQ2hpbmEgVG93biBISU5ESSBNT1ZJRSB3aXRoIHRvcnJlbnQMzY=samsi/smpte.subsequently PDF link annotation
- https://pes-sa.com/sites/default/files/webform/dr-babasaheb-ambedkar-hindi-movie-full-hd-download.pdfIn PDF document text
- https://cambodiaonlinemarket.com/wp-content/uploads/2022/07/HD_Online_Player_David_Attenborough_Africa_1080p_Down.pdfIn PDF document text
- https://eventaka.com/wp-content/uploads/2022/07/siahel.pdfIn PDF document text
- https://www.pedomanindonesia.com/advert/chembiodraw-14-0-serial-keygen-full/In PDF document text
- https://socialtak.net/upload/files/2022/07/VmpXNVoVtOXg6DwV4Uia_03_79c6bb2c9598ab0dc014ed4daf61ceb1_file.pdfIn PDF document text
- https://empleosasugusto.org/wp-content/uploads/2022/07/Ko_To_Tamo_Peva_Ceo_Film_Free_Download_EXCLUSIVE.pdfIn PDF document text
- https://scappy.bmde-labs.com/upload/files/2022/07/Ddbrv5mOQVrGSfW7vkBw_03_79c6bb2c9598ab0dc014ed4daf61ceb1_file.pdfIn PDF document text
- https://roundabout-uk.com/brazzers-login-e-senha-upd/In PDF document text
- http://www.cpakamal.com/the-curse-of-blackwater-gibz-crack-better/In PDF document text
- https://followgrown.com/upload/files/2022/07/ywtYEZGoTcCD7a62iMzD_03_bddd91d9bd5ba0143f0a36da3e94c45a_file.pdfIn PDF document text
- https://shobeklobek.com/easeus-todo-backup-12-0-0-2-crack-work-full-license-code-2020/In PDF document text
- http://theartdistrictdirectory.org/wp-content/uploads/2022/07/Zumba_Fitness_2_PAL_WII_IMARSBy_Renegde_Copytodvd_Compiuter_Hippo_Palmas_Docente.pdfIn PDF document text
- https://www.nzangoartistresidency.com/kali-shankar-full-exclusive-movie-720p/In PDF document text
- https://www.rpsnj.org/sites/g/files/vyhlif3731/f/uploads/riverdale_use_of_facilities_form_2019-2020.pdfIn PDF document text
- http://www.gatetowellness.com/sites/default/files/webform/pdf2id-35-full-checked.pdfIn PDF document text
- https://xenosystems.space/wp-content/uploads/2022/07/rheaemyl.pdfIn PDF document text
- https://btr-pen.com/wp-content/uploads/2022/07/heavdebb.pdfIn PDF document text
- https://homeimproveinc.com/wp-content/uploads/2022/07/gertaby.pdfIn PDF document text
- https://fierce-ravine-48127.herokuapp.com/linaldr.pdfIn PDF document text
- https://mykingdomtoken.com/upload/files/2022/07/7PFTxS1h3zUGzcevYVrL_03_79c6bb2c9598ab0dc014ed4daf61ceb1_file.pdfIn PDF document text
- http://www.tcpdf.orgIn PDF document text
- http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
- http://purl.org/dc/elements/1.1/In PDF document text
- http://ns.adobe.com/xap/1.0/In PDF document text
- http://ns.adobe.com/pdf/1.3/In PDF document text
- http://ns.adobe.com/xap/1.0/mm/In PDF document text
- http://www.aiim.org/pdfa/ns/extension/In PDF document text
- http://www.aiim.org/pdfa/ns/schema#In PDF document text
- http://www.aiim.org/pdfa/ns/property#In PDF document text
- http://www.aiim.org/pdfa/ns/id/In PDF document text
🗂 Part of campaign:
secureserver.net
1471 samples
Open this report in the interactive analyzer, or submit your own file for analysis.