SUSPICIOUS — shark-hacks-roblox_GM431946152.pdf
SUSPICIOUS — shark-hacks-roblox_GM431946152.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (44/100). 4 of 53 detection engines flagged it.
Identification
- SHA-256:
6e706b423cd9d9aa567bf99ee1c79bb32149513870301563ac404491af86c75e - SHA-1:
ba8e030c05e12dd4e0cc66cd8548c838547170fd - MD5:
b5c6170304dbfefce52391f52e57bc17 - ssdeep:
768:KvRnKgXPUsBz00D2xK+bVLY+qXcvdoHfsHbJ:cbXPvDdqV8+IC0f0bJ - TLSH:
T1242F8DF79187DC4C7E8A8B47ECE6146DA8C8A28CB022DE5095D4733CD0389BEBB11521 - Submitted as: shark-hacks-roblox_GM431946152.pdf
- File type: pdf · Size: 34414 bytes
- Verdict: suspicious (44/100)
Detections (4 of 53 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Microsoft Defender: Trojan:PDF/Phish.CFN!MTB
- Emsisoft (Emergency Kit): PDF.Spam.Heur.2
- Trellix Stinger (McAfee): PDF/Phish-TWM!B5C6170304DB
Why this verdict
The suspicious score of 44/100 is the fusion of 3 weighted signals:
- Embedded network infrastructure: http://netcdn.co/app/431946152/shark-hacks-roblox-game-hack, https://privatearrangements.co.nz/public/files/roblox-cbro-skins-for-free_GM431946152.pdf, https://privatearrangements.co.nz/public/files/free-private-minecraft-server_GM479516143.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- http://netcdn.co/app/431946152/shark-hacks-roblox-game-hack
- https://privatearrangements.co.nz/public/files/roblox-cbro-skins-for-free_GM431946152.pdf
- https://privatearrangements.co.nz/public/files/free-private-minecraft-server_GM479516143.pdf
- https://privatearrangements.co.nz/public/files/free-robux-websites-2021_GM431946152.pdf
- https://privatearrangements.co.nz/public/files/roblox-cheats-for-android_GM431946152.pdf
- https://privatearrangements.co.nz/public/files/get-a-roblox-account-wiyh-robux-free_GM431946152.pdf
- https://privatearrangements.co.nz/public/files/coin-master-game_GM406889139.pdf
- https://privatearrangements.co.nz/public/files/how-can-u-get-free-robux_GM431946152.pdf
- https://privatearrangements.co.nz/public/files/pasos-para-hackear-coins-master_GM406889139.pdf
- https://privatearrangements.co.nz/public/files/how-to-egt-free-robux-robuxian-youtbe_GM431946152.pdf
- https://privatearrangements.co.nz/public/files/free-robux-wheel_GM431946152.pdf
- https://privatearrangements.co.nz/public/files/roblox-free-robux-hack-2021-pc_GM431946152.pdf
- https://privatearrangements.co.nz/public/files/how-to-get-free-robux_GM431946152.pdf
- https://privatearrangements.co.nz/public/files/google-how-do-you-get-free-robux_GM431946152.pdf
- https://privatearrangements.co.nz/public/files/minecraft-hacked-client-112-2_GM479516143.pdf
- https://privatearrangements.co.nz/public/files/free-roblox-accounts-20212021_GM431946152.pdf
- https://privatearrangements.co.nz/public/files/robux-hack-free-robux_GM431946152.pdf
- https://privatearrangements.co.nz/public/files/free-fans-on-tiktok_GM835599320.pdf
- https://privatearrangements.co.nz/public/files/free-mask-roblox_GM431946152.pdf
- https://privatearrangements.co.nz/public/files/give-free-robux_GM431946152.pdf
- https://privatearrangements.co.nz/public/files/coin-master-fun-hack_GM406889139.pdf
Embedded domains
- netcdn.co
- privatearrangements.co.nz
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report