SUSPICIOUS — how-to-generate-pubg-uc_GM1330123889.pdf
SUSPICIOUS — how-to-generate-pubg-uc_GM1330123889.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (44/100). 3 of 53 detection engines flagged it.
Identification
- SHA-256:
59f9f5ed3a096ee162907576d079fb9828f9848e5e3d4396108a1dcf4a35b615 - SHA-1:
52ff896f88ea024a9ad01f28dc7d411ffc7b388f - MD5:
7f2859061233ac9a405a52cad287592d - ssdeep:
6144:FegEhMIdoOoX0RnQhlZ3RmEiuw2p3CEzaL9K+Yb:welZaQhlZ3sq3DaL9w - TLSH:
T1A644F1F3225FDE1C61421717ADE42118954CDB45A5A0EFE4A4883BBCD8AC7BC2F52B21 - Submitted as: how-to-generate-pubg-uc_GM1330123889.pdf
- File type: pdf · Size: 257136 bytes
- Verdict: suspicious (44/100)
Detections (3 of 53 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Microsoft Defender: Trojan:PDF/Phish.CFN!MTB
- Emsisoft (Emergency Kit): PDF.Spam.Heur.2
Why this verdict
The suspicious score of 44/100 is the fusion of 3 weighted signals:
- Embedded network infrastructure: http://netcdn.tw/app/1330123889/how-to-generate-pubg-uc-game-hack, https://www.wetotravels.com/uploaded_files/userfiles/files/how-to-get-a-refund-on-roblox-2021_GM431946152.pdf, https://www.wetotravels.com/uploaded_files/userfiles/files/free-camera-not-activating-roblox_GM431946152.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- http://netcdn.tw/app/1330123889/how-to-generate-pubg-uc-game-hack
- https://www.wetotravels.com/uploaded_files/userfiles/files/how-to-get-a-refund-on-roblox-2021_GM431946152.pdf
- https://www.wetotravels.com/uploaded_files/userfiles/files/free-camera-not-activating-roblox_GM431946152.pdf
- https://www.wetotravels.com/uploaded_files/userfiles/files/hacking-ldshadowladys-roblox-account_GM431946152.pdf
- https://www.wetotravels.com/uploaded_files/userfiles/files/c-code-for-roblox-level-2-hacks_GM431946152.pdf
- https://www.wetotravels.com/uploaded_files/userfiles/files/free-robux-codes-2021_GM431946152.pdf
- https://www.wetotravels.com/uploaded_files/userfiles/files/how-to-use-scripts-in-roblox-hack_GM431946152.pdf
- https://www.wetotravels.com/uploaded_files/userfiles/files/how-to-get-hack-in-rake-roblox_GM431946152.pdf
- https://www.wetotravels.com/uploaded_files/userfiles/files/robux-gratis-hack-2021_GM431946152.pdf
- https://www.wetotravels.com/uploaded_files/userfiles/files/when-tiktok-free-views-and-likes_GM835599320.pdf
- https://www.wetotravels.com/uploaded_files/userfiles/files/robux-hack-for-free-easy-no-dowland_GM431946152.pdf
- https://www.wetotravels.com/uploaded_files/userfiles/files/aimbot-download-roblox-free_GM431946152.pdf
- https://www.wetotravels.com/uploaded_files/userfiles/files/how-to-put-hacks-on-roblox_GM431946152.pdf
- https://www.wetotravels.com/uploaded_files/userfiles/files/anyway-to-legally-get-free-robux_GM431946152.pdf
- https://www.wetotravels.com/uploaded_files/userfiles/files/how-to-hack-roblox-accounts-2021-easy_GM431946152.pdf
- https://www.wetotravels.com/uploaded_files/userfiles/files/how-to-get-free-robux-promo-codes_GM431946152.pdf
- https://www.wetotravels.com/uploaded_files/userfiles/files/free-minecraft-mods-for-pc_GM479516143.pdf
- https://www.wetotravels.com/uploaded_files/userfiles/files/coin-master-free-spins-iphone-2021_GM406889139.pdf
- https://www.wetotravels.com/uploaded_files/userfiles/files/robux-for-kids_GM431946152.pdf
- https://www.wetotravels.com/uploaded_files/userfiles/files/free-robux-websites-that-actually-work-2021_GM431946152.pdf
- https://www.wetotravels.com/uploaded_files/userfiles/files/coin-master-free-spins-today-daily-links_GM406889139.pdf
Embedded domains
- netcdn.tw
- www.wetotravels.com
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report