SUSPICIOUS — roblox-make-shirt-free_GM431946152.pdf

SUSPICIOUS — roblox-make-shirt-free_GM431946152.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (44/100). 4 of 53 detection engines flagged it.

Identification

• SHA-256: 76cdd0756815171e1f88e5fa0abe1c78d341c1fb6410b1c8a8fb7c3a65049dbc
• SHA-1: 3d53f61e0e47337458aa1571897bf59eaff0857d
• MD5: 01af45a157f45a05ce1af73c2d4b8b44
• ssdeep: 768:25mYh6l9MANclcH8i+ilpCmwAu2/ls+6j2JtmnDplllfF2vzBJdz:2P0pNnv+Zm4+6KsDBqdz
• TLSH: T1392F6DF714A7DC9C3A87CF0399B75169B8CAC2C87113DA5496C87B2C447CA9EAB10461
• Submitted as: roblox-make-shirt-free_GM431946152.pdf
• File type: pdf · Size: 34042 bytes
• Verdict: suspicious (44/100)

Detections (4 of 53 engines)

• MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
• Microsoft Defender: Trojan:PDF/Phish.CFN!MTB
• Emsisoft (Emergency Kit): PDF.Spam.Heur.2
• Trellix Stinger (McAfee): PDF/Phish-TWM!01AF45A157F4

Why this verdict

The suspicious score of 44/100 is the fusion of 3 weighted signals:

• Embedded network infrastructure: http://netcdn.co/app/431946152/roblox-make-shirt-free-game-hack, http://nalmpantistractors.gr/images/april-1st-hack-roblox_GM431946152.pdf, http://nalmpantistractors.gr/images/best-free-roblox-jailbreak-hack_GM431946152.pdf - static signal, weight 0.35, confidence 0.60
• Document active content: uri-action - static signal, weight 0.30, confidence 0.60
• Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55

Dynamic analysis

No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.

Embedded URLs

• http://netcdn.co/app/431946152/roblox-make-shirt-free-game-hack
• http://nalmpantistractors.gr/images/april-1st-hack-roblox_GM431946152.pdf
• http://nalmpantistractors.gr/images/best-free-roblox-jailbreak-hack_GM431946152.pdf
• http://nalmpantistractors.gr/images/impe-kako-dobiti-free-robux_GM431946152.pdf
• http://nalmpantistractors.gr/images/roblox-why-are-there-no-free-clothes-reddit_GM431946152.pdf
• http://nalmpantistractors.gr/images/legit-coin-master-hack-without-verification_GM406889139.pdf
• http://nalmpantistractors.gr/images/free-items-on-roblox-for-pc_GM431946152.pdf
• http://nalmpantistractors.gr/images/coin-master-time-hack-2021_GM406889139.pdf
• http://nalmpantistractors.gr/images/is-minecraft-education-edition-free_GM479516143.pdf
• http://nalmpantistractors.gr/images/roblox-free-player-points_GM431946152.pdf
• http://nalmpantistractors.gr/images/free-robux-giving-group_GM431946152.pdf
• http://nalmpantistractors.gr/images/how-to-hack-animation-pack-in-roblox_GM431946152.pdf
• http://nalmpantistractors.gr/images/room-roblox-game-cheats_GM431946152.pdf
• http://nalmpantistractors.gr/images/free-robux-card-codes-for-kids_GM431946152.pdf
• http://nalmpantistractors.gr/images/hacks-fr-roblox_GM431946152.pdf
• http://nalmpantistractors.gr/images/how-to-get-free-robux-builders-club_GM431946152.pdf
• http://nalmpantistractors.gr/images/como-hackear-roblox-y-tener-robux-gratis_GM431946152.pdf
• http://nalmpantistractors.gr/images/free-followers-on-tiktok_GM835599320.pdf
• http://nalmpantistractors.gr/images/free-robux-redeem-codes-2021_GM431946152.pdf
• http://nalmpantistractors.gr/images/hacking-roblox-tags_GM431946152.pdf
• http://nalmpantistractors.gr/images/how-to-get-powergrip-gauntlet-in-parkour-roblox-free_GM431946152.pdf

Embedded domains

• netcdn.co
• nalmpantistractors.gr

Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report