SUSPICIOUS — how-to-get-free-robux-without-verification_GM431946152.pdf
SUSPICIOUS — how-to-get-free-robux-without-verification_GM431946152.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (44/100). 5 of 53 detection engines flagged it.
Identification
- SHA-256:
82135cace510930b874b1f469231ec7bc0c563990e5b754bb5e70c815e84b659 - SHA-1:
a0d72f868fec459f6dc4e787af56816f55af9829 - MD5:
c992cdc81693fc5739997e001dc3c9b9 - ssdeep:
768:9Flfak/gAi4uW56xSwd0xxDZvHJC94Q46B9wSZx2ByOosqWN2:93DIAvAa5fJRtU9wAx7KN2 - TLSH:
T1EB328FF7018BDC5C6547DF039AFA259D7099A6883172D69001D8376CE0ACAEE7B50A32 - Submitted as: how-to-get-free-robux-without-verification_GM431946152.pdf
- File type: pdf · Size: 43532 bytes
- Verdict: suspicious (44/100)
Detections (5 of 53 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Microsoft Defender: Trojan:PDF/Phish.CFN!MTB
- Emsisoft (Emergency Kit): PDF.Spam.Heur.2
- Trellix Stinger (McAfee): PDF/Phish-TWM!C992CDC81693
- Kaspersky (KVRT): HEUR:Hoax.PDF.Phish.gen
Why this verdict
The suspicious score of 44/100 is the fusion of 3 weighted signals:
- Embedded network infrastructure: https://netcdn.xyz/app/431946152/how-to-get-free-robux-without-verification-game-hack, https://mubaohiemasia.com/ckfinder/userfiles/files/roblox-comcom_GM431946152.pdf, https://mubaohiemasia.com/ckfinder/userfiles/files/get-free-spins-coin-master_GM406889139.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- https://netcdn.xyz/app/431946152/how-to-get-free-robux-without-verification-game-hack
- https://mubaohiemasia.com/ckfinder/userfiles/files/roblox-comcom_GM431946152.pdf
- https://mubaohiemasia.com/ckfinder/userfiles/files/get-free-spins-coin-master_GM406889139.pdf
- https://mubaohiemasia.com/ckfinder/userfiles/files/free-spins-coin-master-links-blogger_GM406889139.pdf
- https://mubaohiemasia.com/ckfinder/userfiles/files/how-to-get-minecraft-pe-for-free_GM479516143.pdf
- https://mubaohiemasia.com/ckfinder/userfiles/files/is-roblox-free-on-nintendo-switch_GM431946152.pdf
- https://mubaohiemasia.com/ckfinder/userfiles/files/coin-master-spin-hack_GM406889139.pdf
- https://mubaohiemasia.com/ckfinder/userfiles/files/coin-master-gold-cards-free-link_GM406889139.pdf
- https://mubaohiemasia.com/ckfinder/userfiles/files/free-robux-generator-for-kids_GM431946152.pdf
- https://mubaohiemasia.com/ckfinder/userfiles/files/free-shields-coin-master_GM406889139.pdf
- https://mubaohiemasia.com/ckfinder/userfiles/files/coin-master-twitter-free-spins_GM406889139.pdf
- https://mubaohiemasia.com/ckfinder/userfiles/files/coin-master-free-spins-2021_GM406889139.pdf
- https://mubaohiemasia.com/ckfinder/userfiles/files/free-card-link-coin-master_GM406889139.pdf
- https://mubaohiemasia.com/ckfinder/userfiles/files/free-robux-that-actually-works_GM431946152.pdf
- https://mubaohiemasia.com/ckfinder/userfiles/files/robux-matchcomfree-robux_GM431946152.pdf
- https://mubaohiemasia.com/ckfinder/userfiles/files/chisel-and-bits-mod-pe_GM479516143.pdf
- https://mubaohiemasia.com/ckfinder/userfiles/files/roblox-game-free-download_GM431946152.pdf
- https://mubaohiemasia.com/ckfinder/userfiles/files/minecraft-xbox-360-free_GM479516143.pdf
- https://mubaohiemasia.com/ckfinder/userfiles/files/spin-free-coin-master_GM406889139.pdf
- https://mubaohiemasia.com/ckfinder/userfiles/files/free-spin-coin-master-iphone_GM406889139.pdf
- https://mubaohiemasia.com/ckfinder/userfiles/files/coin-master-game-for-pc-free-download_GM406889139.pdf
Embedded domains
- netcdn.xyz
- mubaohiemasia.com
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report