SUSPICIOUS — minecraft-bedrock-free-with-java_GM479516143.pdf
SUSPICIOUS — minecraft-bedrock-free-with-java_GM479516143.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (44/100). 2 of 53 detection engines flagged it.
Identification
- SHA-256:
3541aaab2e0742aff2db46b1391f3455c10cc3b84fde2f10f7a58247bddff34b - SHA-1:
5f389d1bf95f8334622b69d0f6024e97fe0e9123 - MD5:
53e15d07424e4e76fc17a68b1ec57d5a - ssdeep:
768:rtMitF8CoAJ18jmdnjrMHbpssgQ3cPGGxJSRTcxlAI1AmIPGK++RTJ/q3RZpN5Hg:8wfkp0Abr9/C7N5HQ40+Od7 - TLSH:
T134307CF7129BEC201E804F939BF41169FB49A34DB1906E4454E93BFCC9345BCAB126A1 - Submitted as: minecraft-bedrock-free-with-java_GM479516143.pdf
- File type: pdf · Size: 37190 bytes
- Verdict: suspicious (44/100)
Detections (2 of 53 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Microsoft Defender: flagged
Why this verdict
The suspicious score of 44/100 is the fusion of 3 weighted signals:
- Embedded network infrastructure: http://jobsflow.net/pdf/netcdn.tw/app/479516143/minecraft-bedrock-free-with-java-game-hack, https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/how-to-get-hacks-on-roblox_gm431946152.pdf, https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/free-shirts-on-roblox-2021_gm431946152.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- http://jobsflow.net/pdf/netcdn.tw/app/479516143/minecraft-bedrock-free-with-java-game-hack
- https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/how-to-get-hacks-on-roblox_gm431946152.pdf
- https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/free-shirts-on-roblox-2021_gm431946152.pdf
- https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/how-to-get-any-hair-for-free-on-roblox_gm431946152.pdf
- https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/free-spin-generator-for-coin-master_gm406889139.pdf
- https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/roblox-vehicle-simulator-hack-download_gm431946152.pdf
- https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/rbx-gg-free-robux_gm431946152.pdf
- https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/roblox-the-guy-who-hacked-the-admin-panel_gm431946152.pdf
- https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/free-robux-app-real_gm431946152.pdf
- https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/roblox-best-free-models_gm431946152.pdf
- https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/roblox-adopt-me-hacks-2021_gm431946152.pdf
- https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/roblox-phantom-forces-flame-cheat_gm431946152.pdf
- https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/no-human-verification_gm431946152.pdf
- https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/daily-free-spins-coin-master-app_gm406889139.pdf
- https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/how-to-hack-robux-2021_gm431946152.pdf
- https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/bluestacks-robux-hack_gm431946152.pdf
- https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/how-to-have-free-face-in-roblox_gm431946152.pdf
- https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/coin-master-hack-spins-free_gm406889139.pdf
- https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/free-robux-for-kids-no-verification_gm431946152.pdf
- https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/backpacking-hack-roblox-v3rmillion_gm431946152.pdf
- https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/who-hack-in-roblox_gm431946152.pdf
- http://www.w3.org/1999/02/22-rdf-syntax-ns#
Embedded domains
- jobsflow.net
- netcdn.tw
- www.w3.org
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report