MALICIOUS
174
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
This PDF document is identified as a phishing lure due to its image-only nature and embedded clickable link. The heuristic 'PDF_SEO_LINK_FARM' indicates the presence of numerous external links, suggesting an attempt to distribute or redirect to malicious content. The ClamAV detection further confirms its malicious classification as 'Pdf.Phishing.Trojan'.
Machine Learning
- Nyx PDF Classifier malicious score 0.6563
Heuristics 5
-
Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARMSmall PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
-
ClamAV: Pdf.Phishing.Trojan-d2568dad23a94d95-d2568dad23a94d95-10044375-0 critical CLAMAV_DETECTIONClamAV detected this file as malware: Pdf.Phishing.Trojan-d2568dad23a94d95-d2568dad23a94d95-10044375-0
-
Image-only document with action trigger (screenshot lure) medium PDF_IMAGE_LUREPDF has 1 image(s), only 0 text block(s), carries a click-outward action, and is only 44 KB — typical shape of a phishing lure where a full-page screenshot hides a clickable button that launches or submits to an attacker URL.
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL https://xajibur.ru/award?keyword=clinical+pathophysiology+book+pdf
- https://metenesepagozo.weebly.com/uploads/1/3/4/7/134710396/lopadibobupu.pdf
- https://nerilumasufut.weebly.com/uploads/1/3/1/4/131437044/7835401.pdf
- https://suvedezu.weebly.com/uploads/1/3/1/3/131379937/0c08f05810a.pdf
- https://wexivupesowapab.weebly.com/uploads/1/3/2/7/132712225/vuvusosopegew.pdf
- https://uploads.strikinglycdn.com/files/0765ef58-b863-4778-b974-16754f719ee1/special_quadrilaterals_worksheet_answers.pdf
- https://9cf93ecd-64ee-4ad6-afcc-f350577a7522.filesusr.com/ugd/c4dbd3_b467ea95b7d64318a82e3e7abdf77fba.pdf?index=true
- https://uploads.strikinglycdn.com/files/67a84986-c004-4ee4-b237-0dd869afb70a/asp.net_mvc_3_download_for_visual_studio_2015.pdf
- https://s3.amazonaws.com/gitipelut/fimesesekawabi.pdf
- https://s3.amazonaws.com/daniwodug/75319977986.pdf
- https://uploads.strikinglycdn.com/files/e7f7010d-e589-410f-a67b-9c30d028a65c/bijokezilokuf.pdf
- https://uploads.strikinglycdn.com/files/20d66e9b-2b25-4a30-9454-546c523bc59b/gevovixumugi.pdf
- https://s3.amazonaws.com/wozowuledij/10353672783.pdf
- https://s3.amazonaws.com/legapatatezisa/cross_platform_games_ps4_pc_free.pdf
- https://s3.amazonaws.com/zurovajij/bovumovukomoxapipa.pdf
- https://s3.amazonaws.com/dowavelaxam/clasificacion_de_funciones_calculo_diferencial.pdf
- https://s3.amazonaws.com/sesijesule/90459346105.pdf
- https://3e206333-d6ff-4be5-a246-6289f7259d3b.filesusr.com/ugd/973a7d_1824b8d6a4694364821d35f2f929efdd.pdf?index=true
- https://s3.amazonaws.com/lekezaru/13921973664.pdf
- https://s3.amazonaws.com/dinigugaxej/angular_2_file_from_api.pdf
- https://c3e9b54c-2a54-408b-a6b9-e2f8ab5a503c.filesusr.com/ugd/136d07_dfadf7aee2e845e493c2d6335dea27f8.pdf?index=true
- https://s3.amazonaws.com/satulibaren/gambardella_srl_report_aziende.pdf
- https://s3.amazonaws.com/sinadi/kewokofesul.pdf
- https://s3.amazonaws.com/bezutu/72766334366.pdf
- https://3b0fe5ff-7f86-489c-8138-fc984e51136c.filesusr.com/ugd/bfd78a_4888d2516a4949d78f6e59b56eeb1a32.pdf?index=true
- https://uploads.strikinglycdn.com/files/bbb08334-5661-4653-952b-dcd06418a21f/viraberokawaz.pdf
Open this report in the interactive analyzer, or submit your own file for analysis.