SUSPICIOUS — free-roblox-accounts-that-work_GM431946152.pdf
SUSPICIOUS — free-roblox-accounts-that-work_GM431946152.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (44/100). 5 of 53 detection engines flagged it.
Identification
- SHA-256:
74c58a4aee1fd741da855ab89a3a4df8c4c3074ca644e12194ff3725d80caf30 - SHA-1:
32600ced4f69749a891c6d8bdf072fb086b86733 - MD5:
e6cc496a2670efd32a84ad570d9fcfc6 - ssdeep:
768:fInBhEQZMOsUabyahno8Zpt/3g+z2Sz7YEMVrDjT14x8yodd8Rx:gBhz/Q9ukp7YVXjTOe8Rx - TLSH:
T10B2F7EF711ABCD4CB68B6F036CB6116E64CAE28C21629B0161D8763D847C9EE6F10536 - Submitted as: free-roblox-accounts-that-work_GM431946152.pdf
- File type: pdf · Size: 35268 bytes
- Verdict: suspicious (44/100)
Detections (5 of 53 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Microsoft Defender: Trojan:PDF/Phish.CFN!MTB
- Emsisoft (Emergency Kit): PDF.Spam.Heur.2
- Trellix Stinger (McAfee): PDF/Phish-TWM!E6CC496A2670
- Kaspersky (KVRT): HEUR:Hoax.PDF.Phish.gen
Why this verdict
The suspicious score of 44/100 is the fusion of 3 weighted signals:
- Embedded network infrastructure: http://netcdn.tw/app/431946152/free-roblox-accounts-that-work-game-hack, http://mtsn-baranti.com/perpus/repository/free-decals-for-roblox-pizza-place_GM431946152.pdf, http://mtsn-baranti.com/perpus/repository/free-robux-discord-servers_GM431946152.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- http://netcdn.tw/app/431946152/free-roblox-accounts-that-work-game-hack
- http://mtsn-baranti.com/perpus/repository/free-decals-for-roblox-pizza-place_GM431946152.pdf
- http://mtsn-baranti.com/perpus/repository/free-robux-discord-servers_GM431946152.pdf
- http://mtsn-baranti.com/perpus/repository/roblox-hack-robux-no-verify_GM431946152.pdf
- http://mtsn-baranti.com/perpus/repository/wurst-mc_GM479516143.pdf
- http://mtsn-baranti.com/perpus/repository/free-coinmaster-spins_GM406889139.pdf
- http://mtsn-baranti.com/perpus/repository/free-robux-no-human-verification-generator_GM431946152.pdf
- http://mtsn-baranti.com/perpus/repository/roblox-interceptor-hack_GM431946152.pdf
- http://mtsn-baranti.com/perpus/repository/games-that-gives-free-robux-2021-july_GM431946152.pdf
- http://mtsn-baranti.com/perpus/repository/free-beautiful-hair-roblox_GM431946152.pdf
- http://mtsn-baranti.com/perpus/repository/free-shirt-roblox_GM431946152.pdf
- http://mtsn-baranti.com/perpus/repository/hack-roblox-robux-pc_GM431946152.pdf
- http://mtsn-baranti.com/perpus/repository/ww-roblox-come_GM431946152.pdf
- http://mtsn-baranti.com/perpus/repository/roblox-land-free-robux_GM431946152.pdf
- http://mtsn-baranti.com/perpus/repository/roblox-account-hacker-online_GM431946152.pdf
- http://mtsn-baranti.com/perpus/repository/how-to-hack-roblox-accounts-easy-2021_GM431946152.pdf
- http://mtsn-baranti.com/perpus/repository/robloxheroxyz-free-robux_GM431946152.pdf
- http://mtsn-baranti.com/perpus/repository/free-roblox-accounts-with-robux-that-work-not-banned-2021_GM431946152.pdf
- http://mtsn-baranti.com/perpus/repository/free-robux-hack-no-human-verification-or-survey_GM431946152.pdf
- http://mtsn-baranti.com/perpus/repository/roblox-ultimate-boxing-hack_GM431946152.pdf
- http://mtsn-baranti.com/perpus/repository/free-spins-coin-master-march-2021_GM406889139.pdf
Embedded domains
- netcdn.tw
- mtsn-baranti.com
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report