MALICIOUS
174
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
This PDF document is identified as malicious by ClamAV and ML classifiers, exhibiting characteristics of a phishing lure. The heuristic 'PDF_IMAGE_LURE' indicates it's an image-only document with a clickable action, designed to trick users into visiting an external URL. The presence of a large number of external PDF links, as flagged by 'PDF_SEO_LINK_FARM', suggests a link farm used for SEO poisoning or to distribute further malicious content.
Machine Learning
- Nyx PDF Classifier malicious score 0.5491
Heuristics 5
-
Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARMSmall PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
-
ClamAV: Pdf.Phishing.Trojan-d2568dad23a94d95-d2568dad23a94d95-10044375-0 critical CLAMAV_DETECTIONClamAV detected this file as malware: Pdf.Phishing.Trojan-d2568dad23a94d95-d2568dad23a94d95-10044375-0
-
Image-only document with action trigger (screenshot lure) medium PDF_IMAGE_LUREPDF has 1 image(s), only 0 text block(s), carries a click-outward action, and is only 59 KB — typical shape of a phishing lure where a full-page screenshot hides a clickable button that launches or submits to an attacker URL.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL https://dugedepap.ru/award?keyword=pdf+pathophysiology+of+hypertension
- https://kopabiziruzoxol.weebly.com/uploads/1/3/1/4/131406592/makajukidono.pdf
- https://vamugibamapiju.weebly.com/uploads/1/3/4/5/134588186/rawiwinorezilarasodu.pdf
- https://static.s123-cdn-static.com/uploads/4403537/normal_60088cd89caf4.pdf
- http://potenciy.xyz/microsoft_word_shortcut_keys_in_hindi0ullu.pdf
- https://napajudiweji.weebly.com/uploads/1/3/4/3/134316113/larimamijutaxad.pdf
- http://xofelivigavas.mywebcommunity.org/good_amharic_books_free_download.pdf
- https://fagojature.weebly.com/uploads/1/3/3/9/133987822/mizevosikoleraz_regidobisule_toroginavuvuji.pdf
- https://cdn-cms.f-static.net/uploads/4479226/normal_5fea06253437f.pdf
- https://riwipawubo.weebly.com/uploads/1/3/1/4/131453561/5688445.pdf
- https://lideteli.weebly.com/uploads/1/3/0/7/130775407/9361451.pdf
- https://nejajabowiwuxo.weebly.com/uploads/1/3/0/7/130775705/xijubu.pdf
- http://vehicleinsusa.com/18i8_3rd_gen_vs_18i20snkyy.pdf
- http://pimifawimonidij.mywebcommunity.org/age_of_exploration_vocabulary_worksheet_answers.pdf
- https://nalokulomegeze.weebly.com/uploads/1/3/4/7/134758193/2479af3b.pdf
- http://devgame.design/carmina_burana_satbuzni5.pdf
- https://fabupegux.weebly.com/uploads/1/3/4/6/134689396/bexirexo-zaxobofow-nafuremak-tubabaf.pdf
- http://siteznakomstv69.space/giloratesowodedikorimiwifbstjn.pdf
- https://cdn-cms.f-static.net/uploads/4482418/normal_603158a5b0091.pdf
- https://pijetupuz.weebly.com/uploads/1/3/4/3/134351396/6d8416b774128.pdf
- http://collegegraduatecentraldating.com/rosikalaxojapujezazelaraj2gqoy.pdf
- https://jenevokitajawol.weebly.com/uploads/1/3/4/2/134235402/5af0543120a.pdf
- https://talogaxuzule.weebly.com/uploads/1/3/4/5/134596774/giroxipefukanot_nibodi.pdf
- http://lerumedinopox.onlinewebshop.net/konovojoset.pdf
- http://xuvekixofeku.onlinewebshop.net/epigenetica_nutricional.pdf
- http://suduxegowur.onlinewebshop.net/71873340332.pdf
Open this report in the interactive analyzer, or submit your own file for analysis.