Malicious PDF — malware analysis report

Heuristics 5

• Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
  Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
• Cracked-software lure uses download-gateway redirectors high PDF_CRACKED_SOFTWARE_REDIRECTOR_LINK_FARM
  PDF contains multiple cracked-software/keygen/serial-key lure links together with long encoded download-gateway URLs or known crack-download redirector hosts. This is stronger than generic piracy vocabulary: the document is an SEO lure that funnels users through redirect/download infrastructure commonly used for adware, unwanted software, or droppers.
• PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LURE
  PDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
• External URI info PDF_URI
  PDF contains an external URL action
• Embedded URL info EMBEDDED_URL
  One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
  URL http://bestentrypoint.com/M2QgbG9saWNvbiBhbmltYXRpb24gZ2lmM2Q.marinovich/sicker.dustier.ZG93bmxvYWR8Zk01Wm5nNU5IeDhNVFkxTnpFNE5qazFOWHg4TWpVNU1IeDhLRTBwSUZkdmNtUndjbVZ6Y3lCYldFMU1VbEJESUZZeUlGQkVSbDA/geoff/hanged PDF link annotation

  • https://poetbook.com/upload/files/2022/07/XbFrJaH8umPIBZ482K3c_08_61f624afc9c76c3dff1c5d16ff3e00af_file.pdfIn PDF document text
  • https://www.distributorbangunan.com/atlassian-jira-v-6-0-top-keygen/In PDF document text
  • https://coopdespensasolidaria.com/sola-gsm-calc-v05/In PDF document text
  • https://ithinksew.net/advert/middle-earth-shadow-of-mordor-rg-mechanics-crack-new/In PDF document text
  • https://cambodiaonlinemarket.com/wolfenstein-ii-the-new-colossus-update-4-codex-no-survey-no-password-2019/In PDF document text
  • https://akastars.com/upload/files/2022/07/efptT6GLfTW2f8HJZEpd_08_61f624afc9c76c3dff1c5d16ff3e00af_file.pdfIn PDF document text
  • https://www.petisliberia.com/molekularbiologie-der-zelle-alberts-ebook-download-_hot_/In PDF document text
  • https://movingbay.com/actia-multidiag-torrentl/In PDF document text
  • https://ideaboz.com/2022/07/08/hd-online-player-dil-bechara-pyaar-ka-maara-hd-1080p-free/In PDF document text
  • https://lifesspace.com/upload/files/2022/07/xer2Ha4EWw5glzlNtZbk_08_61f624afc9c76c3dff1c5d16ff3e00af_file.pdfIn PDF document text
  • https://www.29chat.com/upload/files/2022/07/gX5dsgn6ZuUB5k7ZEQRK_08_5ea460d859821f3fc36488a3ecd6d03d_file.pdfIn PDF document text
  • https://www.twp.ferguson.pa.us/sites/g/files/vyhlif576/f/styles/news_image_teaser/public/news/pages_from_bos_agenda_packet_05-16-2022_with_links.pdfIn PDF document text
  • https://conbluetooth.net/wp-content/uploads/2022/07/Oracle_11g_Administration_Razvan_Bizoi_BETTER.pdfIn PDF document text
  • https://autocracymachinery.com/tararumpummoviedownload-exclusivehindi/In PDF document text
  • http://www.hva-concept.com/futuracha-the-font-link/In PDF document text
  • https://ayusya.in/kovai-kalaimagal-astro-software-with-crack-_best_-2/In PDF document text
  • http://www.ourartworld.com/nomadfactory-all-plugins-bundle-vst-rtas-v1-2-x86-x64-incl-keygen-link-air-rar-mega/In PDF document text
  • https://poetbook.com/upload/files/2022/07/XbFrJaH8umPIBZ482K3c_08_61f624afc9c76c3dff1c5d16ffIn PDF document text
  • https://cambodiaonlinemarket.com/wolfenstein-ii-the-new-colossus-update-4-codex-no-survey-no-In PDF document text
  • https://akastars.com/upload/files/2022/07/efptT6GLfTW2f8HJZEpd_08_61f624afc9c76c3dff1c5d16ff3eIn PDF document text
  • https://lifesspace.com/upload/files/2022/07/xer2Ha4EWw5glzlNtZbk_08_61f624afc9c76c3dff1c5d16ffIn PDF document text
  • https://www.29chat.com/upload/files/2022/07/gX5dsgn6ZuUB5k7ZEQRK_08_5ea460d859821f3fc364In PDF document text
  • https://www.twp.ferguson.pa.us/sites/g/files/vyhlif576/f/styles/news_image_teaser/public/news/pagesIn PDF document text
  • https://conbluetooth.net/wp-In PDF document text
  • http://www.ourartworld.com/nomadfactory-all-plugins-bundle-vst-rtas-v1-2-x86-x64-incl-keygen-link-In PDF document text
  • http://bestentrypoint.com/m2qgbg9sawnvbibhbmltyxrpb24gz2lmm2q.marinovich/sicker.dustier.zg93bmxvywr8zk01wm5nnu5iedhnvfkxtnpfne5qazfowhg4twpvnu1iedhlrtbwsuzkdmntundjbvz6y3lcyldfmu1vbejesuzzeulgqkvsbda/geoff/hangedIn PDF document text
  • http://stamlachea.yolasite.com/resources/Tribalwars-Bot-Keygengolkes-VERIFIED.pdfIn PDF document text
  • https://trello.com/c/BkNyV7Bi/143-simodrive-611-error-code-list-fullIn PDF document text
  • https://wakelet.com/wake/UJxY8izjABFe-5RQJIRpMIn PDF document text
  • http://www.tcpdf.orgIn PDF document text
  • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
  • http://purl.org/dc/elements/1.1/In PDF document text
  • http://ns.adobe.com/xap/1.0/In PDF document text
  • http://ns.adobe.com/pdf/1.3/In PDF document text
  • http://ns.adobe.com/xap/1.0/mm/In PDF document text
  • http://www.aiim.org/pdfa/ns/extension/In PDF document text
  • http://www.aiim.org/pdfa/ns/schema#In PDF document text
  • http://www.aiim.org/pdfa/ns/property#In PDF document text
  • http://www.aiim.org/pdfa/ns/id/In PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.