MALICIOUS
64
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
T1204.002 Malicious Link
The PDF file contains a large number of external links, identified by the PDF_SEO_LINK_FARM heuristic. One of the primary external links points to 'http://rocketcarrental.com/hulks/unfit/broderick/cybershot/...'. This suggests the document is designed to redirect users to potentially malicious or spam content hosted on numerous domains. The embedded URLs and the link farm behavior indicate a distribution or redirection tactic.
Machine Learning
- Nyx PDF Classifier clean score 0.0119
Heuristics 3
-
Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARMSmall PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://rocketcarrental.com/hulks/unfit/broderick/cybershot/Z2VvZ3JhZmlqYSB6YSAxIHJhenJlZCBnaW1uYXppamUgcGRmLnJhcgZ2V/mandalay/ZG93bmxvYWR8Y1kwZG1KNWVueDhNVFkxTmpjM01UZ3hPSHg4TWpVM05IeDhLRTBwSUhKbFlXUXRZbXh2WnlCYlJtRnpkQ0JIUlU1ZA/partum/shogunates
- https://institutoeducardio.org/bhse-onkelz-discography-52-alben-rar-fix/
- https://www.sdssocial.world/upload/files/2022/07/gCNWGwL6jQe63JGRDkgN_03_f589e9a971994c3da4811f05d229971d_file.pdf
- https://alumbramkt.com/download-chori-chori-hd-720p-full-full-movie-in-hindi/
- http://www.filmwritten.org/wp-content/uploads/2022/07/priche.pdf
- https://indalienergy.com/wp-content/uploads/2022/07/Lost_Grimoires_Collection_Torrent_Download_TOP.pdf
- https://chinesemedicineevents.com/wp-content/uploads/2022/07/lammatl.pdf
- http://dikatonerprint.com/?p=4578
- http://ice-aec.com/index.php/2022/07/03/opel-dvd-90-navi-2012-rar-extra-quality/
- https://gametimereviews.com/wp-content/uploads/2022/07/jarinn.pdf
- https://thevalleyvoice.ca/advert/dil-hai-tumhara-full-movie-hd-1080p-download-fix/
- https://topnotchjobboard.com/system/files/webform/resume/batman-beyond-return-of-the-joker-720pbatman-beyond-return-of-the-joker-720p.pdf
- https://atmosphere-residence.ro/ps3-console-id-generator-download-better/
- https://www.elitetest.com/system/files/webform/plan-documentation/walkeil21.pdf
- https://u-ssr.com/upload/files/2022/07/Mk6ZDT8R28gMkAIPETer_03_f589e9a971994c3da4811f05d229971d_file.pdf
- https://www.seagirt-nj.gov/sites/g/files/vyhlif3791/f/news/affordable_housing_settlement_agreement_-_sitar.pdf
- https://www.riseupstar.com/upload/files/2022/07/fkMtBLe6cnNQcPXLYmFR_03_d314c3bdd90d757ae1f3b5ac4aa6780f_file.pdf
- https://sirius-park.com/far-cry-4-v110-complete-edition-repackcorepack-full/
- https://www.cc-seas.columbia.edu/system/files/webform/codigo-da-vinci-1080p-latino.pdf
- https://phys.washington.edu/system/files/webform/descargar-gratis-software-tora-programacion-lineal.pdf
- http://www.tcpdf.org
- http://www.w3.org/1999/02/22-rdf-syntax-ns#
- http://purl.org/dc/elements/1.1/
- http://ns.adobe.com/xap/1.0/
- http://ns.adobe.com/pdf/1.3/
- http://ns.adobe.com/xap/1.0/mm/
- http://www.aiim.org/pdfa/ns/extension/
- http://www.aiim.org/pdfa/ns/schema#
- http://www.aiim.org/pdfa/ns/property#
- http://www.aiim.org/pdfa/ns/id/
Open this report in the interactive analyzer, or submit your own file for analysis.