MALICIOUS
64
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
T1204.002 Malicious File
The archive contains a PDF file flagged as malicious. Numerous unknown URLs were extracted, many of which appear to be part of a command and control infrastructure or redirect to executable files. The presence of a malicious PDF within an archive strongly suggests a spearphishing attachment delivery method, where the PDF likely attempts to trick the user into downloading and executing a secondary payload.
Heuristics 3
-
Archive contains malicious member critical ARCHIVE_CHILD_MALICIOUSAt least one extracted archive member was classified as malicious. The archive is a transport wrapper for that payload.
-
Archive entry limit reached (50) info ARCHIVE_LIMITOnly the first 50 files were scanned.
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://estguard.com/cgi-bin/ca7/z002106201r0019Rd32a35f1X2bcd42fcY60f52722Z0100f060 In document body
- http://geonetsa.com/cgi-bin/ca7/z002106201r0019R3335355fX79c65ee1Y0e5a3c71Z0100f060In document body
- http://qjugiegy.info/cgi-bin/login.htm/z00a106201r0013R741abd02X98c767ccY6daeb1c6Z0100f070In document body
- http://beancountercity.in/cgi-bin/uiq/eH2385575bV0100f060006R71a5d197102T94a2c460201l0019In document body
- http://ghjihkvuno.com/nte/indep4/eH1e662482V0100f060006R00000000102T552d1e9d201l0409K83a46b94In document body
- http://ajxpeehuvpcv.com/nte/trest1.exe/eH6c9ec2e3V0100f060006R40b93336102Tc1be3578201l0019K251e2f2bIn document body
- http://beancountercity.in/cgi-bin/uiq/eH7650fce8V0100f060006R378aae97102T05069059201l0019In document body
- http://www.zeustech.net/In document body
- http://]hostname[:port]/pathIn document body
- http://efxhifatwe.com/nte/trest7/eH60ade0e5V0100f060006R00000000102T6dafffdf201l0409Kf5e4f5e1In document body
- http://beancountercity.in/cgi-bin/uiq/eH2155e997V0100f060006R97f3b4e5102Tdaed1e5b201l0019In document body
- http://googleinru.in/cgi-bin/etn/z002106201r0019R0e711ae9Xbc771f60Y7ea651b8Z0100f060In document body
- http://googleinru.in/cgi-bin/etn/z002106201r0019R97f3b4e5X8f07bcebY17ffbea6Z0100f060In document body
- http://beancountercity.in/cgi-bin/uiq/eH41533cadV0100f060006Rb9735610102Tcf558244201l0019In document body
- http://www.curah.net/1/getexe.php?spl=pdf_expIn document body
- http://googleinrus.in/cgi-bin/plt/z002106201r0019R2610d3c3Xdaec1651Y2ba903b7Z0100f060In document body
- http://ajnuocfdrukv.com/nte/TREST1.html/eH42ca49a9V0100f060006R921e4b6e102T300a67c1201l0019Kede1dc9eIn document body
- http://nethealthcarego.com/cgi-bin/153/n002106203r000cX91f1b760Y2796d647Z0100f060In document body
- http://kirda.in/x/exe.php?src=marcos&id=&x=pdf1In document body
- http://kirda.in/x/exe.php?src=marcos&id=&x=pdf2In document body
- http://kirda.in/x/exe.php?src=marcos&id=&x=pdf3In document body
- http://beancountercity.in/cgi-bin/uiq/eH76df8c54V0100f060006R97f3b4e5102T72979c3f201l0019In document body
- http://djmx.info/page/information.html/n00a106201r007fXce7a3988Y2b1ca287In document body
- http://www.gorillawalker.com/environmental-chemistry-of-soils.pdfIn document body
- http://www.gorillawalker.com/friedrich-seitz-concerto-in-d-for-violin-and-piano-op.pdfIn document body
- http://www.gorillawalker.com/dendritic-cells-in-fundamental-and-clinical-immunology-volume-2-advances.pdfIn document body
- http://www.gorillawalker.com/love-is-all-that-matters-tokyo-from-one-to-infinity.pdfIn document body
- http://www.gorillawalker.com/intravascular-ultrasound.pdfIn document body
- http://www.gorillawalker.com/tuko-and-the-birds-a-tale-from-the-philippines.pdfIn document body
- http://www.gorillawalker.com/cookie-and-cracker-technology.pdfIn document body
- http://www.gorillawalker.com/practical-repair-and-maintenance-of-communications-equipment-p-h-tech.pdfIn document body
- http://www.gorillawalker.com/born-to-reign.pdfIn document body
- http://www.gorillawalker.com/aerobics-teaching-and-practice-tutorials.pdfIn document body
- http://www.gorillawalker.com/book-of-jubilees-guides-to-the-apocrypha-and-pseudepigrap.pdfIn document body
- http://www.gorillawalker.com/house-of-his-choosing.pdfIn document body
- http://www.gorillawalker.com/arkansas-arkie-woodchopper-square-dance-calls-with-music-and-instructions.pdfIn document body
- http://www.gorillawalker.com/bow-tug-operations-with-azimuth-stern-drive-tugs-risks-and.pdfIn document body
- http://www.gorillawalker.com/the-nine-myths-of-aging-maximizing-the-quality-of-later.pdfIn document body
- http://www.gorillawalker.com/zorro-the-complete-classic-adventures.pdfIn document body
- http://www.gorillawalker.com/sundancer.pdfIn document body
- http://www.gorillawalker.com/the-skinny-delicious-paleo-holiday-recipe-book-over-150-recipes.pdfIn document body
- http://www.gorillawalker.com/the-unpleasant-profession-of-jonathan-hoag.pdfIn document body
- http://www.gorillawalker.com/capt-hook-the-adventures-of-a-notorious-youth.pdfIn document body
- http://www.gorillawalker.com/sociology-themes-and-perspectives-haralambos-and-holborn.pdfIn document body
- http://www.gorillawalker.com/the-pool-book-living-with-a-swimming-pool-1993.pdfIn document body
- http://www.gorillawalker.com/el-cient.pdfIn document body
- http://www.gorillawalker.com/child-support-urban-books.pdfIn document body
- http://www.gorillawalker.com/el-terremoto-de-san-salvador-narracion-de-un-superviviente-villegas.pdfIn document body
- http://www.gorillawalker.com/handbook-series-on-semiconductor-parameters-handbook-series-on-semiconductor-parameters.pdfIn document body
- http://www.gorillawalker.com/california-family-laws-rules-2007-california-family-laws-and-rules.pdfIn document body
+54 more URL(s)
Open this report in the interactive analyzer, or submit your own file for analysis.