Malicious PDF — malware analysis report

Static analysis result for SHA-256 ee7703ccf29f5d3c…

MALICIOUS

PDF

255.7 KB Created: 2022-06-12 19:27:23 +02:00 Authoring application: levvane (via PDF Master 1.0.1) First seen: 2026-05-17
MD5: 44ff3d8aa00f90f95ba746b33f21db42 SHA-1: 336fd14db36354f054d58866e38f20fe008dab77 SHA-256: ee7703ccf29f5d3c03d445142a9058d76a48298e4d3a45509594a5e8bece3877
64 Risk Score

Machine Learning

  • Nyx PDF Classifier clean score 0.0006

Heuristics 3

  • Cracked-software lure uses shortlink/download gateway critical PDF_CRACKED_SOFTWARE_SHORTLINK_LURE
    PDF visible text advertises a crack, serial number, archive, or pirated-software download and pairs it with a shortlink or encoded download gateway. This is a high-confidence social-engineering carrier for unwanted software or droppers; the PDF itself is not a parser exploit.
  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://evacdir.com/benzoyl.ZG93bmxvYWR8RXQ0Ykc1elkzeDhNVFkxTkRrNE9URTJNbng4TWpVNU1IeDhLRTBwSUZkdmNtUndjbVZ6Y3lCYldFMU1VbEJESUZZeUlGQkVSbDA?bancopopular.destined.oversweet.T2ZmaWNpYWwgTGVFY28gTGUgTWF4IDIgWDgyMCBTdG9jayBSb20T2Z PDF link annotation
    • https://murahlo.com/wp-content/uploads/2022/06/Q1_CHN_bridge_bootloadertar.pdfIn PDF document text
    • https://www.dominionphone.com/wp-content/uploads/2022/06/2d_design_v2_license_crack_38.pdfIn PDF document text
    • https://triberhub.com/upload/files/2022/06/cMN7QATTjE2jGeUsu3PW_12_70f503027993c62f68fed3be150f787d_file.pdfIn PDF document text
    • http://seti.sg/wp-content/uploads/2022/06/Thermoplan_CTM_Technical_Manual_Download_LINK.pdfIn PDF document text
    • https://dragalacoaching1.com/skins-pioneer-cdj-2000-djm-900-nexus-virtual-dj/In PDF document text
    • https://popstay.info/upload/files/2022/06/cx8DDLFEBGwXkr9kTFmC_12_70f503027993c62f68fed3be150f787d_file.pdfIn PDF document text
    • http://formeetsante.fr/camtasia-studio-8-0-3-build-1018-with-keygen-fixed-download/In PDF document text
    • https://visitfrance.travel/hotel/3-star-hotels-in-alsace/bangla-chodar-golpo-pdf-free-verified-download/In PDF document text
    • https://pk-luggage.com/wp-content/uploads/2022/06/Chalte_Chalte_Full_Movie_In_Hindi_Dubbed_Download_720p_Movie.pdfIn PDF document text
    • https://gretchenscannon.com/2022/06/12/autodesk-revit-2018-mep-fundamentals-metric-epub/In PDF document text
    • https://netcityme.com/wp-content/uploads/2022/06/Spark_Movie_Hindi_Dubbed_Download_TOP.pdfIn PDF document text
    • http://www.chineseqingmen.org/awp-croshair-download/In PDF document text
    • https://gaming-walker.com/upload/files/2022/06/IOqdqF7yCcSCUMCxvV17_12_3712f360f506b7d94d4151506a84ff84_file.pdfIn PDF document text
    • https://elstruplaug.dk/wp-content/uploads/lustjan.pdfIn PDF document text
    • https://trenirajsamajom.rs/wp-content/uploads/2022/06/ranelo.pdfIn PDF document text
    • https://xn--80aab1bep0b6a.online/wp-content/uploads/laujan.pdfIn PDF document text
    • https://tbone.fi/wp-content/uploads/2022/06/mahabharata_story_in_telugu_audio_free_download.pdfIn PDF document text
    • https://adhicitysentulbogor.com/autocom-cdp-vci-driver-download-exclusive/In PDF document text
    • https://dokterapk.com/refx-slayer-2-download-new/In PDF document text
    • https://dreamlandit.com/wp-content/uploads/2022/06/Runtime_Error_217_At_004bb10d_Autodata_Windows_8.pdfIn PDF document text
    • http://evacdir.com/benzoyl.zg93bmxvywr8rxq0ykc1elkzedhnvfkxtkrrne9urtjnbng4twpvnu1iedhlrtbwsuzkdmntundjbvz6y3lcyldfmu1vbejesuzzeulgqkvsbda?bancopopular.destined.oversweet.t2zmawnpywwgtgvfy28gtgugtwf4idigwdgymcbtdg9jaybsb20t2zIn PDF document text
    • http://www.tcpdf.orgIn PDF document text
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text
    • http://www.aiim.org/pdfa/ns/extension/In PDF document text
    • http://www.aiim.org/pdfa/ns/schema#In PDF document text
    • http://www.aiim.org/pdfa/ns/property#In PDF document text
    • http://www.aiim.org/pdfa/ns/id/In PDF document text

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 2

Files carved from inside the sample during analysis.

FilenameKindSourceSize
stream_002_off00000e9b.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0xE9B 120140 bytes
SHA-256: a217f12862e0ff75203bdd4136ca0d68471050be46bb09aed5306898926ffdd4
font_01_sfnt_off0000bc7e.bin pdf-font-stream PDF embedded font (sfnt) at offset 0xBC7E 76772 bytes
SHA-256: 07ce6fea3c98bf59133021be55ce9147f9c26365efe580a2a4f82130ca697f54

Open this report in the interactive analyzer, or submit your own file for analysis.