MALICIOUS — coin-master-free-spin-link-list_GM406889139.pdf

MALICIOUS — coin-master-free-spin-link-list_GM406889139.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (75/100). 4 of 53 detection engines flagged it, exhibiting 1 ATT&CK technique.

Identification

• SHA-256: 63d3ca0f91d4e555ca529cb73f778a17f5d443afb566435ffe699051173ab3f1
• SHA-1: e5b7c60c00551ae60140fb461b47970d337d0d3e
• MD5: 97c9e795177364da52c6b5e89ffeba4a
• ssdeep: 768:xou38UqvmHsfSY2v0YJ4f6sV8RQxH7U6i7+NaZ:xN3JBMV2v0Wg8RQd7gmaZ
• TLSH: T153307CFB4053CC4C6ECA8F13EE772A5D7899D2896222DDA18098772DC06C5EEBB50461
• Submitted as: coin-master-free-spin-link-list_GM406889139.pdf
• File type: pdf · Size: 36143 bytes
• Verdict: malicious (75/100)

Detections (4 of 53 engines)

• MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
• Microsoft Defender: Trojan:PDF/Phish.CFN!MTB
• Emsisoft (Emergency Kit): PDF.Spam.Heur.2
• Trellix Stinger (McAfee): PDF/Phish-TWM!97C9E7951773

MITRE ATT&CK

• T1566.002

Why this verdict

The malicious score of 75/100 is the fusion of 4 weighted signals:

• Embedded link rated malicious by URL analysis: https://daring.mtsn7sumedang.sch.id/__statics/gudangsoal/files/how-to-hack-assassin-on-roblox_GM431946152.pdf - network signal, weight 0.70, confidence 0.80
• Embedded network infrastructure: http://netcdn.tw/app/406889139/coin-master-free-spin-link-list-game-hack, https://daring.mtsn7sumedang.sch.id/__statics/gudangsoal/files/100-free-spins-coin-master_GM406889139.pdf, https://daring.mtsn7sumedang.sch.id/__statics/gudangsoal/files/how-to-hack-assassin-on-roblox_GM431946152.pdf - static signal, weight 0.35, confidence 0.60
• Document active content: uri-action - static signal, weight 0.30, confidence 0.60
• Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55

Dynamic analysis

No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.

Embedded URLs

• http://netcdn.tw/app/406889139/coin-master-free-spin-link-list-game-hack
• https://daring.mtsn7sumedang.sch.id/__statics/gudangsoal/files/100-free-spins-coin-master_GM406889139.pdf
• https://daring.mtsn7sumedang.sch.id/__statics/gudangsoal/files/how-to-hack-assassin-on-roblox_GM431946152.pdf
• https://daring.mtsn7sumedang.sch.id/__statics/gudangsoal/files/how-do-you-get-free-robux_GM431946152.pdf
• https://daring.mtsn7sumedang.sch.id/__statics/gudangsoal/files/how-to-get-minecraft-for-free-on-tablet_GM479516143.pdf
• https://daring.mtsn7sumedang.sch.id/__statics/gudangsoal/files/robloxcom-without-download-free-game_GM431946152.pdf
• https://daring.mtsn7sumedang.sch.id/__statics/gudangsoal/files/coin-master-unlimited-spin-and-coin-hack_GM406889139.pdf
• https://daring.mtsn7sumedang.sch.id/__statics/gudangsoal/files/how-to-hack-money-in-roblox-vehicle-simulator_GM431946152.pdf
• https://daring.mtsn7sumedang.sch.id/__statics/gudangsoal/files/coin-master-hack-355_GM406889139.pdf
• https://daring.mtsn7sumedang.sch.id/__statics/gudangsoal/files/free-coin-master-spins-2021_GM406889139.pdf
• https://daring.mtsn7sumedang.sch.id/__statics/gudangsoal/files/mcpe-free-download_GM479516143.pdf
• https://daring.mtsn7sumedang.sch.id/__statics/gudangsoal/files/hacks-para-roblox_GM431946152.pdf
• https://daring.mtsn7sumedang.sch.id/__statics/gudangsoal/files/coin-master-hack-online-2021_GM406889139.pdf
• https://daring.mtsn7sumedang.sch.id/__statics/gudangsoal/files/coin-master-hack-pro-gamers_GM406889139.pdf
• https://daring.mtsn7sumedang.sch.id/__statics/gudangsoal/files/actual-free-robux-fast_GM431946152.pdf
• https://daring.mtsn7sumedang.sch.id/__statics/gudangsoal/files/minecraft-pe-apk-download_GM479516143.pdf
• https://daring.mtsn7sumedang.sch.id/__statics/gudangsoal/files/coin-master-hack-apk-download-2021_GM406889139.pdf
• https://daring.mtsn7sumedang.sch.id/__statics/gudangsoal/files/how-to-get-free-robux-2021_GM431946152.pdf
• https://daring.mtsn7sumedang.sch.id/__statics/gudangsoal/files/minecraft-free-apk_GM479516143.pdf
• https://daring.mtsn7sumedang.sch.id/__statics/gudangsoal/files/how-to-win-free-robux_GM431946152.pdf
• https://daring.mtsn7sumedang.sch.id/__statics/gudangsoal/files/coin-and-spin_GM406889139.pdf

Embedded domains

• netcdn.tw
• daring.mtsn7sumedang.sch.id

Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report