SUSPICIOUS — free-25-spins-coin-master-links_GM406889139.pdf

SUSPICIOUS — free-25-spins-coin-master-links_GM406889139.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (44/100). 4 of 53 detection engines flagged it.

Identification

• SHA-256: 615aced246d08cadb63d7d0db2aa046a68151af0c6f20f37f955e55edb033646
• SHA-1: 678846e31b91cd38b91a42866d3cf591a682236a
• MD5: 1845082d1ff60b0d6cb87a92cb8c0c5b
• ssdeep: 768:8Ze1luB84vcSJ/jD4GxshPz82S6wLQI7h+2NSMOzR:8Q1lP7SBD4Gx48j687hd/OzR
• TLSH: T16A307CF7019BCD4C364ACB034B3A606A25C992887126DB9194FDB76C80BC9FDBB14536
• Submitted as: free-25-spins-coin-master-links_GM406889139.pdf
• File type: pdf · Size: 36277 bytes
• Verdict: suspicious (44/100)

Detections (4 of 53 engines)

• MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
• Microsoft Defender: Trojan:PDF/Phish.CFN!MTB
• Emsisoft (Emergency Kit): PDF.Spam.Heur.2
• Trellix Stinger (McAfee): PDF/Phish-TWM!1845082D1FF6

Why this verdict

The suspicious score of 44/100 is the fusion of 3 weighted signals:

• Embedded network infrastructure: http://netcdn.tw/app/406889139/free-25-spins-coin-master-links-game-hack, http://perpustakaan-pelita.sdnpercobaan2yogyakarta.com/repository/estan-hackeando-roblox_GM431946152.pdf, http://perpustakaan-pelita.sdnpercobaan2yogyakarta.com/repository/robloxcom-free-dominus_GM431946152.pdf - static signal, weight 0.35, confidence 0.60
• Document active content: uri-action - static signal, weight 0.30, confidence 0.60
• Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55

Dynamic analysis

No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.

Embedded URLs

• http://netcdn.tw/app/406889139/free-25-spins-coin-master-links-game-hack
• http://perpustakaan-pelita.sdnpercobaan2yogyakarta.com/repository/estan-hackeando-roblox_GM431946152.pdf
• http://perpustakaan-pelita.sdnpercobaan2yogyakarta.com/repository/robloxcom-free-dominus_GM431946152.pdf
• http://perpustakaan-pelita.sdnpercobaan2yogyakarta.com/repository/roblox-fun-com-free-robux_GM431946152.pdf
• http://perpustakaan-pelita.sdnpercobaan2yogyakarta.com/repository/free-spins-and-coins-coin-master-facebook_GM406889139.pdf
• http://perpustakaan-pelita.sdnpercobaan2yogyakarta.com/repository/free-item-roblox-hack_GM431946152.pdf
• http://perpustakaan-pelita.sdnpercobaan2yogyakarta.com/repository/hoq-to-buy-anything-from-catalog-for-free-roblox_GM431946152.pdf
• http://perpustakaan-pelita.sdnpercobaan2yogyakarta.com/repository/suicideboys-hack-slash-roblox-id_GM431946152.pdf
• http://perpustakaan-pelita.sdnpercobaan2yogyakarta.com/repository/how-to-get-gamepasses-for-free-roblox-hack_GM431946152.pdf
• http://perpustakaan-pelita.sdnpercobaan2yogyakarta.com/repository/how-to-hack-roblox-2021_GM431946152.pdf
• http://perpustakaan-pelita.sdnpercobaan2yogyakarta.com/repository/free-coin-and-spin-in-coin-master_GM406889139.pdf
• http://perpustakaan-pelita.sdnpercobaan2yogyakarta.com/repository/how-do-i-get-free-robux-in-rolblox-2021_GM431946152.pdf
• http://perpustakaan-pelita.sdnpercobaan2yogyakarta.com/repository/how-to-win-attack-madness-in-coin-master-hack_GM406889139.pdf
• http://perpustakaan-pelita.sdnpercobaan2yogyakarta.com/repository/roblox-watch-ads-for-free-robux_GM431946152.pdf
• http://perpustakaan-pelita.sdnpercobaan2yogyakarta.com/repository/free-robux-com-2021_GM431946152.pdf
• http://perpustakaan-pelita.sdnpercobaan2yogyakarta.com/repository/tiktok-follower-bot-free_GM835599320.pdf
• http://perpustakaan-pelita.sdnpercobaan2yogyakarta.com/repository/how-to-make-free-roblox-bloxburg_GM431946152.pdf
• http://perpustakaan-pelita.sdnpercobaan2yogyakarta.com/repository/minecraft-hacks-for-2b2t_GM479516143.pdf
• http://perpustakaan-pelita.sdnpercobaan2yogyakarta.com/repository/how-to-hack-youtubers-roblox-password_GM431946152.pdf
• http://perpustakaan-pelita.sdnpercobaan2yogyakarta.com/repository/coin-master-free-spin-and-coins-links-2021_GM406889139.pdf
• http://perpustakaan-pelita.sdnpercobaan2yogyakarta.com/repository/free-trials-for-explots-of-roblox_GM431946152.pdf

Embedded domains

• netcdn.tw
• perpustakaan-pelita.sdnpercobaan2yogyakarta.com

Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report