SUSPICIOUS — hack-para-coin-master-sin-verification_GM406889139.pdf

SUSPICIOUS — hack-para-coin-master-sin-verification_GM406889139.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (44/100). 4 of 53 detection engines flagged it.

Identification

• SHA-256: 0e10100a91a61c5e877c7b1dde940ec3c6674e6a1fd510a3de1b2e155a2c907a
• SHA-1: 87469f4bee6eb19e65eb7e5ab96ed16ab7de4ea9
• MD5: 38b84725c83f59300aeca05d21184b1e
• ssdeep: 768:aSYy1ChsqvPvP4Kbm4Agq6+cWjyjZ74XT3GlJFloR:tV1C0am47q6duyjZ747GlJroR
• TLSH: T192308EF31097CD1C368A9F43A97A259D718EF3896532D61190D47B2D807CAEEBB20621
• Submitted as: hack-para-coin-master-sin-verification_GM406889139.pdf
• File type: pdf · Size: 36096 bytes
• Verdict: suspicious (44/100)

Detections (4 of 53 engines)

• MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
• Microsoft Defender: Trojan:PDF/Phish.CFN!MTB
• Emsisoft (Emergency Kit): PDF.Spam.Heur.2
• Trellix Stinger (McAfee): PDF/Phish-TWM!38B84725C83F

Why this verdict

The suspicious score of 44/100 is the fusion of 3 weighted signals:

• Embedded network infrastructure: http://netcdn.tw/app/406889139/hack-para-coin-master-sin-verification-game-hack, http://mtsn-baranti.com/perpus/repository/free-game-pack-with-google-play-coin-master_GM406889139.pdf, http://mtsn-baranti.com/perpus/repository/how-to-get-free-outrageous-builders-club-on-roblox-2021_GM431946152.pdf - static signal, weight 0.35, confidence 0.60
• Document active content: uri-action - static signal, weight 0.30, confidence 0.60
• Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55

Dynamic analysis

No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.

Embedded URLs

• http://netcdn.tw/app/406889139/hack-para-coin-master-sin-verification-game-hack
• http://mtsn-baranti.com/perpus/repository/free-game-pack-with-google-play-coin-master_GM406889139.pdf
• http://mtsn-baranti.com/perpus/repository/how-to-get-free-outrageous-builders-club-on-roblox-2021_GM431946152.pdf
• http://mtsn-baranti.com/perpus/repository/hacked-server-roblox-id_GM431946152.pdf
• http://mtsn-baranti.com/perpus/repository/how-to-hack-roblox_GM431946152.pdf
• http://mtsn-baranti.com/perpus/repository/free-roblox-dislike-bots_GM431946152.pdf
• http://mtsn-baranti.com/perpus/repository/robux-robux-robux-free-game-in-roblox_GM431946152.pdf
• http://mtsn-baranti.com/perpus/repository/ww-robux_GM431946152.pdf
• http://mtsn-baranti.com/perpus/repository/trolling-gui-hacks-roblox_GM431946152.pdf
• http://mtsn-baranti.com/perpus/repository/is-roblox-free-on-nintendo-switch_GM431946152.pdf
• http://mtsn-baranti.com/perpus/repository/coin-master-connection-lost_GM406889139.pdf
• http://mtsn-baranti.com/perpus/repository/free-robux-easy-and-fast_GM431946152.pdf
• http://mtsn-baranti.com/perpus/repository/roblox-december-2021-cheat-engine-speed_GM431946152.pdf
• http://mtsn-baranti.com/perpus/repository/free-items-on-roblox-in-a-game_GM431946152.pdf
• http://mtsn-baranti.com/perpus/repository/free-robux-inspect-2021_GM431946152.pdf
• http://mtsn-baranti.com/perpus/repository/hack-roblox-beta-one-piece-legendary_GM431946152.pdf
• http://mtsn-baranti.com/perpus/repository/funbloxxyz-free-robux_GM431946152.pdf
• http://mtsn-baranti.com/perpus/repository/ro-ghoul-script_GM431946152.pdf
• http://mtsn-baranti.com/perpus/repository/hw-to-gget-free-robux_GM431946152.pdf
• http://mtsn-baranti.com/perpus/repository/minecraft-bedrock-free-server-hosting_GM479516143.pdf
• http://mtsn-baranti.com/perpus/repository/free-robux-without-doing-anything_GM431946152.pdf

Embedded domains

• netcdn.tw
• mtsn-baranti.com

Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report