Malicious PDF — malware analysis report

Heuristics 6

• Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
  Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
• Cracked-software lure uses shortlink/download gateway critical PDF_CRACKED_SOFTWARE_SHORTLINK_LURE
  PDF visible text advertises a crack, serial number, archive, or pirated-software download and pairs it with a shortlink or encoded download gateway. This is a high-confidence social-engineering carrier for unwanted software or droppers; the PDF itself is not a parser exploit.
• Cracked-software lure uses download-gateway redirectors high PDF_CRACKED_SOFTWARE_REDIRECTOR_LINK_FARM
  PDF contains multiple cracked-software/keygen/serial-key lure links together with long encoded download-gateway URLs or known crack-download redirector hosts. This is stronger than generic piracy vocabulary: the document is an SEO lure that funnels users through redirect/download infrastructure commonly used for adware, unwanted software, or droppers.
• PDF link farm advertises cracked/pirated software medium PDF_CRACKED_SOFTWARE_LURE
  PDF contains many clickable links whose targets use cracked-software, keygen, serial-key, or warez vocabulary. These are SEO-spam lure documents that rank for software-piracy searches and route users to fake 'crack' download pages distributing potentially-unwanted programs, adware, or droppers. The PDF itself carries no exploit — the risk is the linked destinations.
• External URI info PDF_URI
  PDF contains an external URL action
• Embedded URL info EMBEDDED_URL
  One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
  URL http://emailgoal.com/associate/hobbling.martial/juices.mangraviti/saloons.stretcher.Q2luZGVyZWxsYSAzIENhcnRvb24gRnVsbCBNb3ZpZSBJbiBIaW5kaSAxOQQ2l.ZG93bmxvYWR8UW8xZDNSc2ZId3hOamN4TlRRMk5EQTNmSHd5TlRrd2ZId29UU2tnVjI5eVpIQnlaWE56SUZ0WVRVeFNVRU1nVmpJZ1VFUkdYUQ PDF link annotation

  • https://player.soundon.fm/p/Delta-Force-Black-Hawk-Down-V1505-No-Cd-Crack-piveIn PDF document text
  • https://player.soundon.fm/p/Chowdhury-And-Hossain-English-Grammar-Book-Pd-dallIn PDF document text
  • https://player.soundon.fm/p/Bewakoofiyaan-2-Movie-In-Hindi-720p-Fixed-tobowdesIn PDF document text
  • https://player.soundon.fm/p/History-Of-Architecture-By-George-Salvan-Pdf--wertIn PDF document text
  • https://player.soundon.fm/p/HD-Online-Player-El-Gordo-Alberto-Movie-Didri-dialIn PDF document text
  • https://www.gcnetwork1.com/wp-content/uploads/2022/12/Download-Insaniquarium-2-Full-Free-Crack.pdfIn PDF document text
  • https://tecnoimmo.com/trainz-simulator-2010-engineers-edition-keygen-crack-link/In PDF document text
  • https://igsarchive.org/wp-content/uploads/2022/12/Ibm_Pass_21_Lite_Download.pdfIn PDF document text
  • https://www.inge-cultura.org/wp-content/uploads/2022/12/tannfind.pdfIn PDF document text
  • https://hgpropertysourcing.com/reinforced-concrete-a-fundamental-approach-6th-ed-aci318-08-edward-g-nawy-pdf/In PDF document text
  • https://thailand-landofsmiles.com/kutrala-kuravanji-tamil-pdf-download-exclusive/In PDF document text
  • https://cefcredit.com/wp-content/uploads/2022/12/gersdar.pdfIn PDF document text
  • https://vintriplabs.com/darrthemalldualaudiohindi720pdownload-topmovie/In PDF document text
  • http://thisaddiction.org/?p=1048In PDF document text
  • https://kevinmccarthy.ca/spider-lilies-download-mobile-movie-portable/In PDF document text
  • http://adomemorial.com/2022/12/20/forza-motorsport-7-update-v1-137-587-2-incl-dlc-codex-game-hack/In PDF document text
  • https://turbulentelevenvansissi.nl/wp-content/uploads/2022/12/wedjera.pdfIn PDF document text
  • https://hormariye.net/wp-content/uploads/2022/12/Bangla-Song-Rinku-Mp3-Free-Download-UPD.pdfIn PDF document text
  • https://xtc-hair.com/music-masterworks-v3-94-keygen-free-upd/In PDF document text
  • https://www.german-aerospace.de/2022/12/20/bluritysoftwareregistrationkey-hot/In PDF document text
  • http://www.abbotsfordtoday.ca/wp-content/uploads/2022/12/NGC-Super-Mario-Sunshine-JPN-EXCLUSIVE.pdfIn PDF document text
  • http://mindbodyhealthy.org/gangstar-5-jar/In PDF document text
  • http://raga-e-store.com/windowsvistabuild5384beta2serialkey/In PDF document text
  • http://www.caribbeanequipmenttraders.com/wp-content/uploads/2022/12/The-Dynamic-Library-Gsrlddll-Failed-To-Load-Max-Payne-3.pdfIn PDF document text
  • https://xtc-hair.com/tamil-incest-annan-thangai-stories/In PDF document text
  • https://www.gcnetwork1.com/wp-content/uploads/2022/12/Download-Insaniquarium-2-Full-Free-CraIn PDF document text
  • https://hgpropertysourcing.com/reinforced-concrete-a-fundamental-approach-6th-ed-aci318-08-edwaIn PDF document text
  • http://adomemorial.com/2022/12/20/forza-motorsport-7-update-v1-137-587-2-incl-dlc-codex-game-haIn PDF document text
  • http://www.abbotsfordtoday.ca/wp-content/uploads/2022/12/NGC-Super-Mario-Sunshine-JPN-EXCLUIn PDF document text
  • http://www.caribbeanequipmenttraders.com/wp-content/uploads/2022/12/The-Dynamic-Library-GsrlIn PDF document text
  • http://emailgoal.com/associate/hobbling.martial/juices.mangraviti/saloons.stretcher.q2luzgvyzwxsysazienhcnrvb24grnvsbcbnb3zpzsbjbibiaw5kasaxoqq2l.zg93bmxvywr8uw8xzdnsc2zid3hoamn4tlrrmk5eqtnmshd5tlrrd2zid29uu2tnvji5evpiqnlawe56suz0wvrvefnvru1nvmpjz1vfukdyuqIn PDF document text
  • https://player.soundon.fm/p/delta-force-black-hawk-down-v1505-no-cd-crack-piveIn PDF document text
  • http://dejavu.sourceforge.netFontsIn extracted file (font_02_sfnt_off00009bef.bin)
  • http://dejavu.sourceforge.netIn extracted file (stream_003_off0000343c.bin)
  • http://dejavu.sourceforge.net/wiki/index.php/LicenseIn extracted file (stream_003_off0000343c.bin)
  • http://dejavu.sourceforge.net/wiki/index.php/LicenseDejaVuIn extracted file (font_02_sfnt_off00009bef.bin)

Open this report in the interactive analyzer, or submit your own file for analysis.