SUSPICIOUS — robux-earning-websites_GM431946152.pdf

SUSPICIOUS — robux-earning-websites_GM431946152.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (35/100). 4 of 53 detection engines flagged it.

Identification

• SHA-256: 08dbc25a056f9acbbde45816c273ad9659116f3304578bccd641bc01e7d43ec3
• SHA-1: f7ce266ded6bedec46f477e6d9b98c48e0dbf89d
• MD5: ae8933b2bf295965440d45f9f035b410
• ssdeep: 768:0/VzCrozteFQ2jmByIMHFAL1Y0HzK2Yp0UYhInrCSW4vFaXiLZFG6xEmkO:0/VzCrQteFQ2jmByIMHFWHUp07yo4vFf
• TLSH: T11E2E3CF31487CD4CAB8E4F07AAB7295D34C9E78D5192DE414988263CD0BC99E7B40A62
• Submitted as: robux-earning-websites_GM431946152.pdf
• File type: pdf · Size: 30028 bytes
• Verdict: suspicious (35/100)

Detections (4 of 53 engines)

• Microsoft Defender: Trojan:PDF/Phish.CFN!MTB
• Emsisoft (Emergency Kit): PDF.Spam.Heur.2
• Trellix Stinger (McAfee): PDF/Phish-TWM!AE8933B2BF29
• Kaspersky (KVRT): UDS:Trojan.PDF.SBadur.gen

Why this verdict

The suspicious score of 35/100 is the fusion of 2 weighted signals:

• Embedded network infrastructure: https://netcdn.xyz/app/431946152/robux-earning-websites-game-hack, https://elearning.min5bandarlampung.sch.id/__statics/gudangsoal/files/minecraft-windows-10-key-free_GM479516143.pdf, https://elearning.min5bandarlampung.sch.id/__statics/gudangsoal/files/free-robux-codes-2021_GM431946152.pdf - static signal, weight 0.35, confidence 0.60
• Document active content: uri-action - static signal, weight 0.30, confidence 0.60

Dynamic analysis

No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.

Embedded URLs

• https://netcdn.xyz/app/431946152/robux-earning-websites-game-hack
• https://elearning.min5bandarlampung.sch.id/__statics/gudangsoal/files/minecraft-windows-10-key-free_GM479516143.pdf
• https://elearning.min5bandarlampung.sch.id/__statics/gudangsoal/files/free-robux-codes-2021_GM431946152.pdf
• https://elearning.min5bandarlampung.sch.id/__statics/gudangsoal/files/free-robux-just-click_GM431946152.pdf
• https://elearning.min5bandarlampung.sch.id/__statics/gudangsoal/files/free-coin-spin-daily-link-for-coin-master-game_GM406889139.pdf
• https://elearning.min5bandarlampung.sch.id/__statics/gudangsoal/files/free-robux-generator-codes_GM431946152.pdf
• https://elearning.min5bandarlampung.sch.id/__statics/gudangsoal/files/minecraft-aimbot_GM479516143.pdf
• https://elearning.min5bandarlampung.sch.id/__statics/gudangsoal/files/free-robux-place_GM431946152.pdf
• https://elearning.min5bandarlampung.sch.id/__statics/gudangsoal/files/robux-free-com_GM431946152.pdf
• https://elearning.min5bandarlampung.sch.id/__statics/gudangsoal/files/today-free-spin-coin-master_GM406889139.pdf
• https://elearning.min5bandarlampung.sch.id/__statics/gudangsoal/files/free-coinmaster-spins_GM406889139.pdf
• https://elearning.min5bandarlampung.sch.id/__statics/gudangsoal/files/how-to-hack-roblox-to-get-free-robux_GM431946152.pdf
• https://elearning.min5bandarlampung.sch.id/__statics/gudangsoal/files/coin-master-hack-tool-ios_GM406889139.pdf
• https://elearning.min5bandarlampung.sch.id/__statics/gudangsoal/files/coin-master-free-spin-redeem-code_GM406889139.pdf
• https://elearning.min5bandarlampung.sch.id/__statics/gudangsoal/files/free-25-spins-coin-master-links_GM406889139.pdf
• https://elearning.min5bandarlampung.sch.id/__statics/gudangsoal/files/robux-hack-2021_GM431946152.pdf
• https://elearning.min5bandarlampung.sch.id/__statics/gudangsoal/files/free-spins-on-coin-master-iphone_GM406889139.pdf
• https://elearning.min5bandarlampung.sch.id/__statics/gudangsoal/files/open-coin-master_GM406889139.pdf
• https://elearning.min5bandarlampung.sch.id/__statics/gudangsoal/files/free-robux-no-verification-or-survey-2021_GM431946152.pdf
• https://elearning.min5bandarlampung.sch.id/__statics/gudangsoal/files/coin-master-free-spins-link_GM406889139.pdf
• https://elearning.min5bandarlampung.sch.id/__statics/gudangsoal/files/free-robux-legit_GM431946152.pdf

Embedded domains

• netcdn.xyz
• elearning.min5bandarlampung.sch.id

Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report