SUSPICIOUS — free-spins-for-coin-master-game_GM406889139.pdf

SUSPICIOUS — free-spins-for-coin-master-game_GM406889139.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (44/100). 4 of 53 detection engines flagged it.

Identification

• SHA-256: 0b93206a6f877dc15dd91acc0093e5769b837c0730465d3b51c2ac4833c2f6f3
• SHA-1: 36b38fa671bd2fd5c0ab086b149f3358b8005f2b
• MD5: 7178177d103a50db2878c8666398a116
• ssdeep: 768:DWvqlnXbE7hnuKDCFgQ5fwaR0zZWFXiIX1dj6uHt+N1:Ck2hnuADmYaR0oFXiIF4uHsN1
• TLSH: T198305AF711D7CC1C698A9F03A9B7142D74CAD78C6122DB8085D87B6D80BC6BD6F10AA1
• Submitted as: free-spins-for-coin-master-game_GM406889139.pdf
• File type: pdf · Size: 38127 bytes
• Verdict: suspicious (44/100)

Detections (4 of 53 engines)

• MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
• Microsoft Defender: Trojan:PDF/Phish.CFN!MTB
• Emsisoft (Emergency Kit): PDF.Spam.Heur.2
• Trellix Stinger (McAfee): PDF/Phish-TWM!7178177D103A

Why this verdict

The suspicious score of 44/100 is the fusion of 3 weighted signals:

• Embedded network infrastructure: http://netcdn.co/app/406889139/free-spins-for-coin-master-game-game-hack, http://perpus.ftunismabekasi.ac.id/repository/hack-coin-master-for-android_GM406889139.pdf, http://perpus.ftunismabekasi.ac.id/repository/free-coins-coin-master-blog_GM406889139.pdf - static signal, weight 0.35, confidence 0.60
• Document active content: uri-action - static signal, weight 0.30, confidence 0.60
• Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55

Dynamic analysis

No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.

Embedded URLs

• http://netcdn.co/app/406889139/free-spins-for-coin-master-game-game-hack
• http://perpus.ftunismabekasi.ac.id/repository/hack-coin-master-for-android_GM406889139.pdf
• http://perpus.ftunismabekasi.ac.id/repository/free-coins-coin-master-blog_GM406889139.pdf
• http://perpus.ftunismabekasi.ac.id/repository/coin-master-daily-free-spin-app_GM406889139.pdf
• http://perpus.ftunismabekasi.ac.id/repository/login-robux_GM431946152.pdf
• http://perpus.ftunismabekasi.ac.id/repository/roblox-prison-life-hack_GM431946152.pdf
• http://perpus.ftunismabekasi.ac.id/repository/minecraft-free-download-windows-10_GM479516143.pdf
• http://perpus.ftunismabekasi.ac.id/repository/how-to-spped-hack-on-roblox-jailbreak_GM431946152.pdf
• http://perpus.ftunismabekasi.ac.id/repository/can-my-childs-friend-hack-roblox-game_GM431946152.pdf
• http://perpus.ftunismabekasi.ac.id/repository/how-to-hack-a-roblox-chat_GM431946152.pdf
• http://perpus.ftunismabekasi.ac.id/repository/su-tart-sad-story-free-mod-roblox_GM431946152.pdf
• http://perpus.ftunismabekasi.ac.id/repository/free-robux-hack-use_GM431946152.pdf
• http://perpus.ftunismabekasi.ac.id/repository/roblox-robux-hack-no-servey-or-human-vervcation_GM431946152.pdf
• http://perpus.ftunismabekasi.ac.id/repository/coin-master-new-cards-hack_GM406889139.pdf
• http://perpus.ftunismabekasi.ac.id/repository/hack-roblox-dll_GM431946152.pdf
• http://perpus.ftunismabekasi.ac.id/repository/coin-master-daily-free-spins-link-today_GM406889139.pdf
• http://perpus.ftunismabekasi.ac.id/repository/what-is-the-fastest-way-to-get-xp-in-pokemon-go_GM1094591345.pdf
• http://perpus.ftunismabekasi.ac.id/repository/coin-master-app-for-free-spins_GM406889139.pdf
• http://perpus.ftunismabekasi.ac.id/repository/get-free-robux-online_GM431946152.pdf
• http://perpus.ftunismabekasi.ac.id/repository/coin-master-free-daily-spins-link_GM406889139.pdf
• http://perpus.ftunismabekasi.ac.id/repository/minecraft-cheats-switch_GM479516143.pdf

Embedded domains

• netcdn.co
• perpus.ftunismabekasi.ac.id

Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report