SUSPICIOUS — pubg-uc-zing_GM1330123889.pdf
SUSPICIOUS — pubg-uc-zing_GM1330123889.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (44/100). 3 of 53 detection engines flagged it.
Identification
- SHA-256:
4bb7bc251797d3557e7d6bb7797ae4e1e5136d5877d26fe1660a9fa523eab9a8 - SHA-1:
3b8b42535ad2c990c0adae75232d7e4fa504dfde - MD5:
7c9154e16deb0ee1beae27c429184b62 - ssdeep:
6144:YO+QrYabDa1qfRVBX7cAyDDbG7TJWppzU9AoBp2Wy8d:lu1qRVBX7xiOW49AoD2Wr - TLSH:
T16D44F0F7A10FDF4C65475B07AAE42008844DE34969B3EA9800C9BA6CC86C77D6F15F62 - Submitted as: pubg-uc-zing_GM1330123889.pdf
- File type: pdf · Size: 257701 bytes
- Verdict: suspicious (44/100)
Detections (3 of 53 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Microsoft Defender: Trojan:PDF/Phish.CFN!MTB
- Emsisoft (Emergency Kit): PDF.Spam.Heur.2
Why this verdict
The suspicious score of 44/100 is the fusion of 3 weighted signals:
- Embedded network infrastructure: http://netcdn.tw/app/1330123889/pubg-uc-zing-game-hack, http://www.onusgroup.co.in/uploaded_files/userfiles/files/free-roblox-accounts-with-robux-2021_GM431946152.pdf, http://www.onusgroup.co.in/uploaded_files/userfiles/files/free-robux-codes-no-human-verification_GM431946152.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- http://netcdn.tw/app/1330123889/pubg-uc-zing-game-hack
- http://www.onusgroup.co.in/uploaded_files/userfiles/files/free-roblox-accounts-with-robux-2021_GM431946152.pdf
- http://www.onusgroup.co.in/uploaded_files/userfiles/files/free-robux-codes-no-human-verification_GM431946152.pdf
- http://www.onusgroup.co.in/uploaded_files/userfiles/files/free-roblox-sex-game-glory-hole_GM431946152.pdf
- http://www.onusgroup.co.in/uploaded_files/userfiles/files/roblox-how-to-get-anything-off-the-catalog-for-free_GM431946152.pdf
- http://www.onusgroup.co.in/uploaded_files/userfiles/files/how-to-get-free-premium-roblox_GM431946152.pdf
- http://www.onusgroup.co.in/uploaded_files/userfiles/files/coin-master-free-spins-link-facebook-page_GM406889139.pdf
- http://www.onusgroup.co.in/uploaded_files/userfiles/files/cheat-codes-roblox-reason-to-die-101_GM431946152.pdf
- http://www.onusgroup.co.in/uploaded_files/userfiles/files/free-coins-coin-master-today_GM406889139.pdf
- http://www.onusgroup.co.in/uploaded_files/userfiles/files/windows-10-minecraft-hacks_GM479516143.pdf
- http://www.onusgroup.co.in/uploaded_files/userfiles/files/roblox-how-to-download-corruption-hack_GM431946152.pdf
- http://www.onusgroup.co.in/uploaded_files/userfiles/files/free-coins-coin-master-blog_GM406889139.pdf
- http://www.onusgroup.co.in/uploaded_files/userfiles/files/roblox-admin-hack_GM431946152.pdf
- http://www.onusgroup.co.in/uploaded_files/userfiles/files/robux-hack-v6-5-mythical-chaos-pastebin_GM431946152.pdf
- http://www.onusgroup.co.in/uploaded_files/userfiles/files/pokemon-go-free-lucky-egg_GM1094591345.pdf
- http://www.onusgroup.co.in/uploaded_files/userfiles/files/how-to-sign-in-roblox-for-free_GM431946152.pdf
- http://www.onusgroup.co.in/uploaded_files/userfiles/files/get-me-robux-for-free_GM431946152.pdf
- http://www.onusgroup.co.in/uploaded_files/userfiles/files/how-to-get-free-robux-without-downloading-anything_GM431946152.pdf
- http://www.onusgroup.co.in/uploaded_files/userfiles/files/roblox-phantom-forces-hack-mac_GM431946152.pdf
- http://www.onusgroup.co.in/uploaded_files/userfiles/files/daily-free-spin-and-coin_GM406889139.pdf
- http://www.onusgroup.co.in/uploaded_files/userfiles/files/www-coin-master-hack-tk_GM406889139.pdf
Embedded domains
- netcdn.tw
- www.onusgroup.co.in
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report