SUSPICIOUS — will-minecraft-ever-be-free_GM479516143.pdf

SUSPICIOUS — will-minecraft-ever-be-free_GM479516143.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (44/100). 4 of 53 detection engines flagged it.

Identification

• SHA-256: 63f4f54e5095f3fd032637dac68b23a509cd916628c4b95ce28cde0411e78f21
• SHA-1: 5534ba8310cae4726cdacf4a733d163b8c42fbd4
• MD5: bc765418ae5a8016e724a2d1413582a3
• ssdeep: 1536:6IlxXzJGa3vcGtDTq5JoDJ7ZRKyFQPML:RnzJGa3vc0+5o7ZRKC4ML
• TLSH: T173349EF7125BDD9C7D869F07A9B61119B586D38C3221EED045C8BE2CC0BC6BD6B10A21
• Submitted as: will-minecraft-ever-be-free_GM479516143.pdf
• File type: pdf · Size: 54802 bytes
• Verdict: suspicious (44/100)

Detections (4 of 53 engines)

• MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
• Microsoft Defender: Trojan:PDF/Phish.CFN!MTB
• Emsisoft (Emergency Kit): PDF.Spam.Heur.2
• Trellix Stinger (McAfee): PDF/Phish-TWM!BC765418AE5A

Why this verdict

The suspicious score of 44/100 is the fusion of 3 weighted signals:

• Embedded network infrastructure: https://netcdn.xyz/app/479516143/will-minecraft-ever-be-free-game-hack, https://pasangindihomemagelang.com/ckfinder/userfiles/files/free-robux-codes-2021_GM431946152.pdf, https://pasangindihomemagelang.com/ckfinder/userfiles/files/was-minecraft-ever-free_GM479516143.pdf - static signal, weight 0.35, confidence 0.60
• Document active content: uri-action - static signal, weight 0.30, confidence 0.60
• Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55

Dynamic analysis

No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.

Embedded URLs

• https://netcdn.xyz/app/479516143/will-minecraft-ever-be-free-game-hack
• https://pasangindihomemagelang.com/ckfinder/userfiles/files/free-robux-codes-2021_GM431946152.pdf
• https://pasangindihomemagelang.com/ckfinder/userfiles/files/was-minecraft-ever-free_GM479516143.pdf
• https://pasangindihomemagelang.com/ckfinder/userfiles/files/minecraft-free-minecoins_GM479516143.pdf
• https://pasangindihomemagelang.com/ckfinder/userfiles/files/how-do-i-get-robux_GM431946152.pdf
• https://pasangindihomemagelang.com/ckfinder/userfiles/files/free-google-play-promo-codes-coin-master_GM406889139.pdf
• https://pasangindihomemagelang.com/ckfinder/userfiles/files/free-spins-promo-code-for-coin-master_GM406889139.pdf
• https://pasangindihomemagelang.com/ckfinder/userfiles/files/hack-coin-master-dzooka_GM406889139.pdf
• https://pasangindihomemagelang.com/ckfinder/userfiles/files/minecraft-hacked-client-download_GM479516143.pdf
• https://pasangindihomemagelang.com/ckfinder/userfiles/files/cone-master_GM406889139.pdf
• https://pasangindihomemagelang.com/ckfinder/userfiles/files/minecraft-book-collection_GM479516143.pdf
• https://pasangindihomemagelang.com/ckfinder/userfiles/files/coin-master-free-spins-link-hack_GM406889139.pdf
• https://pasangindihomemagelang.com/ckfinder/userfiles/files/coin-master-free-spin-and-trading_GM406889139.pdf
• https://pasangindihomemagelang.com/ckfinder/userfiles/files/coinmasterfree_GM406889139.pdf
• https://pasangindihomemagelang.com/ckfinder/userfiles/files/spin-coin-master-free_GM406889139.pdf
• https://pasangindihomemagelang.com/ckfinder/userfiles/files/impact-minecraft-hack_GM479516143.pdf
• https://pasangindihomemagelang.com/ckfinder/userfiles/files/coin-master-blogspot-free-spins_GM406889139.pdf
• https://pasangindihomemagelang.com/ckfinder/userfiles/files/arsenal-hacks-roblox_GM431946152.pdf
• https://pasangindihomemagelang.com/ckfinder/userfiles/files/toolbox-for-minecraft-pe_GM479516143.pdf
• https://pasangindihomemagelang.com/ckfinder/userfiles/files/coin-master-free-coins-hack_GM406889139.pdf
• https://pasangindihomemagelang.com/ckfinder/userfiles/files/free-free-robux_GM431946152.pdf

Embedded domains

• netcdn.xyz
• pasangindihomemagelang.com

Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report