SUSPICIOUS — bloxburg-roblox-money-hack_GM431946152.pdf

SUSPICIOUS — bloxburg-roblox-money-hack_GM431946152.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (44/100). 1 of 50 detection engines flagged it.

Identification

• SHA-256: 3b1d70310b6943d9b65971fc97419a50908b2ef8628232f239075f77c51cbfff
• SHA-1: 1ddafe4b10b49f32ac75a4896ad1bd8e20bf57b2
• MD5: 7080a7bf3c6e1585f515bc30b839e5f7
• ssdeep: 768:p6MNtF0WoBeeA6dbbL3qxJ9uXHXrQtUAb7tjFZuFUdTOg2fD/IE1fMtg9FcfX8RE:UX0tU/MT+IKigPaXFucJ+hSF8o+8
• TLSH: T1D12F7DFB609FDC606E808F1B5AF40265B68D964D72A08E8055E477BCC4342FDA721B71
• Submitted as: bloxburg-roblox-money-hack_GM431946152.pdf
• File type: pdf · Size: 34679 bytes
• Verdict: suspicious (44/100)

Detections (1 of 50 engines)

• MalwareAnalyser heuristics (entropy/packer): high-entropy-blob

Why this verdict

The suspicious score of 44/100 is the fusion of 3 weighted signals:

• Embedded network infrastructure: http://jobsflow.net/pdf/netcdn.co/app/431946152/bloxburg-roblox-money-hack-game-hack, https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/how-to-get-minecraft-for-free_gm479516143.pdf, https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/www-free-robux-hack_gm431946152.pdf - static signal, weight 0.35, confidence 0.60
• Document active content: uri-action - static signal, weight 0.30, confidence 0.60
• Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55

Dynamic analysis

No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.

Embedded URLs

• http://jobsflow.net/pdf/netcdn.co/app/431946152/bloxburg-roblox-money-hack-game-hack
• https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/how-to-get-minecraft-for-free_gm479516143.pdf
• https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/www-free-robux-hack_gm431946152.pdf
• https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/get-free-robux-generator_gm431946152.pdf
• https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/minecraft-xray-hack_gm479516143.pdf
• https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/good-free-minecraft-server-hosting_gm479516143.pdf
• https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/how-to-get-free-minecraft-skins_gm479516143.pdf
• https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/how-to-hack-coin-master-game_gm406889139.pdf
• https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/minecraft-java-free-trial_gm479516143.pdf
• https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/roblox-login-hack_gm431946152.pdf
• https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/roblox-games-for-free-please_gm431946152.pdf
• https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/roblox-games-for-girls-free_gm431946152.pdf
• https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/how-to-play-minecraft-for-free-on-pc_gm479516143.pdf
• https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/coin-master-free-spins-cheat-deutsch_gm406889139.pdf
• https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/minecraft-115-2-hacks_gm479516143.pdf
• https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/free-roblox-script-loader_gm431946152.pdf
• https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/coin-master-free-spins-and-coins-2021_gm406889139.pdf
• https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/how-to-hack-a-minecraft-server_gm479516143.pdf
• https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/free-tiktok-comments_gm835599320.pdf
• https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/roblox-cheats-for-android_gm431946152.pdf
• https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/roblox-counter-blox-cheats_gm431946152.pdf
• http://www.w3.org/1999/02/22-rdf-syntax-ns#

Embedded domains

• jobsflow.net
• netcdn.co
• www.w3.org

Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report