MALICIOUS
92
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
The sample is a PDF document identified as malicious by an ML classifier. It contains a large number of embedded URLs pointing to external sites, suggesting a link farm or redirection scheme. The document body, though partially corrupted, also contains these URLs, reinforcing the finding of a link farm. No scripts were extracted from this sample.
Machine Learning
- Nyx PDF Classifier malicious score 0.9925
Heuristics 2
-
Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARMSmall PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://owlaokopdf.myhome.cx/48167816681658169/Winds-of-Fate-Valdemar-Mage-Winds-1-by-Mercedes-Lackey.pdf In PDF document text
- http://owlaokopdf.myhome.cx/88166816981628166/The-Mage-Winds-Valdemar-Mage-Winds-1-3-by-Mercedes-Lackey.pdfIn PDF document text
- http://owlaokopdf.myhome.cx/88167816081688164/Oathbreakers-Storm-Rising-Winds-of-Fate-The-Oathbound-The-Black-Gryphon-The-Silver-Gryphon-The-Oathblood-Winds-of-Change-By-The-Sword-The-White-Gryphon-by-Mercedes-Lackey.pdfIn PDF document text
- http://owlaokopdf.myhome.cx/38165816481628167/Magic-s-Promise-Valdemar-Last-Herald-Mage-2-by-Mercedes-Lackey.pdfIn PDF document text
- http://owlaokopdf.myhome.cx/18169816881658161/Storm-Warning-Valdemar-Mage-Storms-1-by-Mercedes-Lackey.pdfIn PDF document text
- http://owlaokopdf.myhome.cx/88169816281698167/Storm-Rising-Valdemar-Mage-Storms-2-by-Mercedes-Lackey.pdfIn PDF document text
- http://owlaokopdf.myhome.cx/481658161816281638168/The-House-of-the-Four-Winds-One-Dozen-Daughters-1-by-Mercedes-Lackey.pdfIn PDF document text
- http://owlaokopdf.myhome.cx/78169816181618167/Intrigues-Valdemar-Collegium-Chronicles-2-by-Mercedes-Lackey.pdfIn PDF document text
- http://owlaokopdf.myhome.cx/481668160816381668169/Exile-s-Honor-Heralds-of-Valdemar-6-by-Mercedes-Lackey.pdfIn PDF document text
- http://owlaokopdf.myhome.cx/38164816181608160/Arrows-of-the-Queen-Heralds-of-Valdemar-1-by-Mercedes-Lackey.pdfIn PDF document text
- http://owlaokopdf.myhome.cx/481668160816381678161/Exile-s-Valor-Heralds-of-Valdemar-7-by-Mercedes-Lackey.pdfIn PDF document text
- http://owlaokopdf.myhome.cx/381628165816981658168/Foundation-Valdemar-Collegium-Chronicles-1-by-Mercedes-Lackey.pdfIn PDF document text
- http://owlaokopdf.myhome.cx/381628166816781668160/The-Hills-Have-Spies-Valdemar-Family-Spies-1-by-Mercedes-Lackey.pdfIn PDF document text
- http://owlaokopdf.myhome.cx/48164816981608164/Queen-s-Own-Valdemar-Arrows-of-the-Queen-1-3-by-Mercedes-Lackey.pdfIn PDF document text
- http://owlaokopdf.myhome.cx/981678163816481648164/Winds-Ocean-Currents-and-Ice-Periods-Explanatory-Chapters-Concerning-Winds-Ocean-Currents-and-Frigid-Eras-by-Charles-Austin-Mendell-Taber.pdfIn PDF document text
- http://owlaokopdf.myhome.cx/381608161816381628162/Jupiter-Winds-Jupiter-Winds-1-by-C-J-Darlington.pdfIn PDF document text
- http://owlaokopdf.myhome.cx/18168816781658162/House-of-the-Winds-by-Mia-Yun.pdfIn PDF document text
- http://owlaokopdf.myhome.cx/281688169816381698167/Intrigues-by-Mercedes-Lackey.pdfIn PDF document text
- http://owlaokopdf.myhome.cx/281638169816681698163/Oathblood-by-Mercedes-Lackey.pdfIn PDF document text
- http://owlaokopdf.myhome.cx/681608161816881658161/I-see-the-winds-by-Kazue-Mizumura.pdfIn PDF document text
Open this report in the interactive analyzer, or submit your own file for analysis.