MALICIOUS
94
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
The file was detected as a phishing trojan by ClamAV. It contains numerous embedded URLs, many of which point to disposable domains, suggesting a link farm or phishing infrastructure. The PDF structure and embedded URLs indicate an attempt to redirect users to malicious content, likely for credential harvesting or further malware delivery.
Machine Learning
- Nyx PDF Classifier suspicious score 0.3846
Heuristics 4
-
ClamAV: Pdf.Phishing.Trojan-d2568dad23a94d95-d2568dad23a94d95-10044375-0 critical CLAMAV_DETECTIONClamAV detected this file as malware: Pdf.Phishing.Trojan-d2568dad23a94d95-d2568dad23a94d95-10044375-0
-
Small PDF is a non-clustered link farm on disposable hosting medium PDF_SEO_DISPOSABLE_LINK_FARMSmall PDF contains many clickable external PDF links spread thin across many distinct hosts (no single dominant host), corroborated by a utm_term SEO-redirector link and/or links parked on free/disposable content hosts. This is the 'free document/template' SEO phishing PDF family, which ranks for search queries and routes users into payload/redirect chains, rather than a normal document citation pattern. The PDF itself carries no exploit — the risk is the linked destinations.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://fishtech.org/uploads/userfiles/file/file/31530803679.pdf In PDF document text
- http://e5tbr2.alruaa.com/ckeditor-ckfinder-integration/uploads/files/83268201074.pdfIn PDF document text
- https://tonere.shop/app/webroot/files/userfiles/files/34885675321.pdfIn PDF document text
- https://www.pelicanfinancialnetwork.com/ckfinder/userfiles/files/vebizilezisajifavoniwuje.pdfIn PDF document text
- http://irinabailey.com/upload/files/23243828751.pdfIn PDF document text
- http://drdj.friend-match.com/upload/files/vodowis.pdfIn PDF document text
- https://bonvoyageindia.in/ckfinder/userfiles/files/39980248135.pdfIn PDF document text
- https://sharidendesignasphalt.com/wp-content/plugins/super-forms/uploads/php/files/3d4d5c9b5ea5f85e7502fb7282a79eee/877937878.pdfIn PDF document text
- https://austarpharma.austarchina.com/upload/files/gerimiweremasujeku.pdfIn PDF document text
- http://nifaelectronics.com/userfiles/file/fiwevor.pdfIn PDF document text
- http://master-stroi76.ru/userfiles/file/kimividanoxas.pdfIn PDF document text
- http://happyhanool.com/ckupload/files/12711516079.pdfIn PDF document text
- http://primethailand.com/ckfinder/userfiles/files/41278030805.pdfIn PDF document text
- http://andreaslasnik.com/data/files/65276209532.pdfIn PDF document text
- http://e-sportis.com/images/upload/29030659390.pdfIn PDF document text
- http://brmxn.com/userfiles/file/20210910191408_df38ib.pdfIn PDF document text
- https://alemarferries.alemarsnp.gr/ckfinder/userfiles/files/fevizibabamobed.pdfIn PDF document text
- http://www.psoealora.es/ckfinder/userfiles/files/fajipixupuzekolek.pdfIn PDF document text
- https://coaching-jk-academic.com/ckfinder/userfiles/files/37216434731.pdfIn PDF document text
- https://tennis-samara.ru/img/file/15029041738.pdfIn PDF document text
- http://iweldbot.com/ckfinder/pho/files/kosadusuwogawukojet.pdfIn PDF document text
- https://generalaudit.pl/eurostyl/photos/file/7071883916.pdfIn PDF document text
- http://a2itsolutions.com/chop/multimedia/userfiles/file/50883447960.pdfIn PDF document text
- http://szjg.hu/images/file/1898196109.pdfIn PDF document text
- http://zopos.zohukum.com/ckfinder/userfiles/files/91917181820.pdfIn PDF document text
- http://learnersdigest.org/userfiles/file/98611503442.pdfIn PDF document text
- https://feedproxy.google.com/~r/1eyvgo/aqOO/~3/ngfLrbzwjls/uplcv?utm_term=great+expectations+themes+pdfPDF link annotation
Open this report in the interactive analyzer, or submit your own file for analysis.