MALICIOUS
94
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
The PDF document contains a large number of external links, many of which point to cracked software or other PDF files. One notable URL is http://find24hs.com/aUNsb3VkIFJlbW92ZXIgMS4wLjIgQ3JhY2sgUGx1cyBBY3RpdmF0aW9uIENvZGUgRnVsbCBWZXJzaW9uIERvd25sb2FkaUN.marinovich/sicker.cardwatch.ZG93bmxvYWR8OHg4TmpOak5IeDhNVFkxTmpjM01UZ3hPSHg4TWpVNE4zeDhLRTBwSUVobGNtOXJkU0JiUm1GemRDQkhSVTVk/houseflies/itchier, which likely serves as a lure for malicious content. The presence of a link farm and the advertisement of cracked software suggest a malicious intent to distribute malware or engage in SEO poisoning.
Machine Learning
- Nyx PDF Classifier clean score 0.0231
Heuristics 4
-
Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARMSmall PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
-
PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LUREPDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://find24hs.com/aUNsb3VkIFJlbW92ZXIgMS4wLjIgQ3JhY2sgUGx1cyBBY3RpdmF0aW9uIENvZGUgRnVsbCBWZXJzaW9uIERvd25sb2FkaUN.marinovich/sicker.cardwatch.ZG93bmxvYWR8OHg4TmpOak5IeDhNVFkxTmpjM01UZ3hPSHg4TWpVNE4zeDhLRTBwSUVobGNtOXJkU0JiUm1GemRDQkhSVTVk/houseflies/itchier PDF link annotation
- http://www.chandabags.com/3dmgame-football-manager-2015-v15-1-3-cracked-3dm-7z-link/In PDF document text
- https://www.ahaspora.com/wp-content/uploads/2022/07/kymfaty.pdfIn PDF document text
- https://fitvending.cl/wp-content/uploads/2022/07/descargar_crack_para_colin_mcrae_dirt_2_pc.pdfIn PDF document text
- https://community.thecityhubproject.com/upload/files/2022/07/vW16n2LpWVGGCykZrfxn_02_e6ff95df4118e096f3bffe3484c091ba_file.pdfIn PDF document text
- https://www.hotels-valdys.fr/non-classe/parks-recreation-season-1-720p-torrentIn PDF document text
- https://logocraticacademy.org/bet-on-soldier-download-setup-for-pc-exclusive/In PDF document text
- http://manpower.lk/?p=3216In PDF document text
- https://www.dpfremovalnottingham.com/wp-content/uploads/2022/07/laurman.pdfIn PDF document text
- https://citizenrelocations.com/2022/07/mudbox-2009-en-32bit-with-crack-x-force-free.htmlIn PDF document text
- https://www.dancesocksbcn.com/advert/neypayasam-short-story-in-malayalam-pdf-160/In PDF document text
- https://www.slas.lk/advert/power-designer-6-0-portable-rar/In PDF document text
- http://www.oscarspub.ca/wp-content/uploads/2022/07/interworx_control_panel_nulled_11.pdfIn PDF document text
- https://ardancestudios.com/wp-content/uploads/2022/07/Gps_Igo_Amigo_84_Download_PORTABLE.pdfIn PDF document text
- https://vv411.com/advert/hd-online-player-vipmarathi-movie-download-link-2015-deool/In PDF document text
- https://marketstory360.com/cuchoast/2022/07/Crackantiddosguardian20_EXCLUSIVE.pdfIn PDF document text
- https://plugaki.com/upload/files/2022/07/Y68CrSyr3f24kKCPAXeo_02_e6ff95df4118e096f3bffe3484c091ba_file.pdfIn PDF document text
- https://www.theblender.it/seinfeld-season-9-dvdrip-torrent-free-download/In PDF document text
- https://stitymlacriapinbes.wixsite.com/ephflatretpedd/post/windows-10-superlite-compact-gaming-edition-1909-19h2-x64-ghost-spectre-freeIn PDF document text
- https://skresha6n.wixsite.com/darconcforri/post/princess-lover-game-patch-english-rar-installIn PDF document text
- http://www.tcpdf.orgIn PDF document text
- http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
- http://purl.org/dc/elements/1.1/In PDF document text
- http://ns.adobe.com/xap/1.0/In PDF document text
- http://ns.adobe.com/pdf/1.3/In PDF document text
- http://ns.adobe.com/xap/1.0/mm/In PDF document text
- http://www.aiim.org/pdfa/ns/extension/In PDF document text
- http://www.aiim.org/pdfa/ns/schema#In PDF document text
- http://www.aiim.org/pdfa/ns/property#In PDF document text
- http://www.aiim.org/pdfa/ns/id/In PDF document text
Open this report in the interactive analyzer, or submit your own file for analysis.