MALICIOUS
94
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
T1204.002 Malicious Link
This PDF document contains a large number of external links, many of which advertise cracked or pirated software. The primary heuristic indicates a link farm designed to promote such content. The embedded URLs likely lead to malicious sites or further download pages for unwanted software.
Machine Learning
- Nyx PDF Classifier clean score 0.0050
Heuristics 4
-
Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARMSmall PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
-
PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LUREPDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://emailgoal.com/algonquin.chastisement/allergy.cockeyed?befuddled=berberine&dreimel=SGluYXJpbyA1IENjYiBFbSBJbmdsZXMgUGRmIDM0SGl/ZG93bmxvYWR8TnAzWkhobmRYeDhNVFkxTnpBMk56RTFOSHg4TWpVNE4zeDhLRTBwSUVobGNtOXJkU0JiUm1GemRDQkhSVTVk PDF link annotation
- http://alkalinedietexposed.com/airlink101-awll3026-driver-2021-download/In PDF document text
- https://www.valenciacfacademyitaly.com/2022/07/06/tally-8-1-with-crack-27-free/In PDF document text
- https://medcoi.com/network/upload/files/2022/07/QX9n3ACFFWvsIKfhPEdZ_06_000a39ef672a860a02651fc54bbc83f4_file.pdfIn PDF document text
- http://rt2a.org/adsense-click-bot-download-cracked/In PDF document text
- https://practicalislam.online/wp-content/uploads/2022/07/Rocket_League_McLaren_570S_Car_Pack_DLCPLAZA_Cheat_Engine_LINK.pdfIn PDF document text
- https://technobix.com/free-lal-kitab-software-download-for-hot/In PDF document text
- https://www.yourfootballshirt.com/wp-content/uploads/2022/07/Tenorshare_UltData_92211_Mac_Crack_Full_2021_Version.pdfIn PDF document text
- http://galaxy7music.com/?p=51287In PDF document text
- https://connectingner.com/2022/07/06/download-automation-studio-5-6-crack-free-__full__/In PDF document text
- https://paintsghana.com/advert/metodo-de-trompeta-pdf-_hot_/In PDF document text
- https://dazzling-badlands-10449.herokuapp.com/leigwend.pdfIn PDF document text
- https://monarchcovecondos.com/advert/hdclone-enterprise-edition-4-2-link-crack/In PDF document text
- http://mrproject.com.pl/advert/lualhati-bautista-dekada-70-pdf-download-_best_l/In PDF document text
- https://hgpropertysourcing.com/wp-content/uploads/2022/07/Shrink_High_School_HOT_Download.pdfIn PDF document text
- https://www.enveth.gr/advert/gibbscam-2012-crack-new/In PDF document text
- https://itoflies.com/ninjatrader-7-crack-exclusive/In PDF document text
- http://dirkjuan.com/bhabhi-pedia-movie-720p-download-__top__-utorrent-movies/In PDF document text
- http://richard-wagner-werkstatt.com/?p=74225In PDF document text
- https://www.bedfordma.gov/sites/g/files/vyhlif6866/f/file/file/guide_to_town_meeting.pdfIn PDF document text
- https://medcoi.com/network/upload/files/2022/07/QX9n3ACFFWvsIKfhPEdZ_06_000a39ef672a860a02In PDF document text
- https://practicalislam.online/wp-content/uploads/2022/07/Rocket_League_McLaren_570S_Car_Pack_DIn PDF document text
- https://www.yourfootballshirt.com/wp-In PDF document text
- https://wakelet.com/wake/OCpNq7pZeVU1njOVfOmcCIn PDF document text
- http://www.tcpdf.orgIn PDF document text
- http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
- http://purl.org/dc/elements/1.1/In PDF document text
- http://ns.adobe.com/xap/1.0/In PDF document text
- http://ns.adobe.com/pdf/1.3/In PDF document text
- http://ns.adobe.com/xap/1.0/mm/In PDF document text
- http://www.aiim.org/pdfa/ns/extension/In PDF document text
- http://www.aiim.org/pdfa/ns/schema#In PDF document text
- http://www.aiim.org/pdfa/ns/property#In PDF document text
- http://www.aiim.org/pdfa/ns/id/In PDF document text
🗂 Part of campaign:
secureserver.net
1471 samples
Open this report in the interactive analyzer, or submit your own file for analysis.