SUSPICIOUS — how-to-get-more-robux_GM431946152.pdf
SUSPICIOUS — how-to-get-more-robux_GM431946152.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (35/100). 1 of 53 detection engines flagged it.
Identification
- SHA-256:
8ca52f25709d56dfb4e618ad750538995c9acf608ba26aacbfe83438609c8429 - SHA-1:
32de5242d009258746a405b3672fe17678e9a5c0 - MD5:
e017f683fc514967daa6c1663c65dd7d - ssdeep:
192:0AKA76k5KFkklRh03tFGZd0WWQmuDYYraUlVip0:0A976+klRmtFQzsgViC - TLSH:
T15D2496E5419BDD1C7A8B4B076EF6225A08CEE34C92AFE560404C5B6CF0ACABF7E15411 - Submitted as: how-to-get-more-robux_GM431946152.pdf
- File type: pdf · Size: 12145 bytes
- Verdict: suspicious (35/100)
Detections (1 of 53 engines)
- Microsoft Defender: Trojan:PDF/Phish.CFN!MTB
Why this verdict
The suspicious score of 35/100 is the fusion of 2 weighted signals:
- Embedded network infrastructure: http://netcdn.tw/app/431946152/how-to-get-more-robux-game-hack, https://www.iosas.info/uploaded_files/userfiles/files/free-robux-no-scam_GM431946152.pdf, https://www.iosas.info/uploaded_files/userfiles/files/how-to-get-free-robux-instantly-2021_GM431946152.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- http://netcdn.tw/app/431946152/how-to-get-more-robux-game-hack
- https://www.iosas.info/uploaded_files/userfiles/files/free-robux-no-scam_GM431946152.pdf
- https://www.iosas.info/uploaded_files/userfiles/files/how-to-get-free-robux-instantly-2021_GM431946152.pdf
- https://www.iosas.info/uploaded_files/userfiles/files/robux-free-no-vertifacation_GM431946152.pdf
- https://www.iosas.info/uploaded_files/userfiles/files/minecraft-hack-download_GM479516143.pdf
- https://www.iosas.info/uploaded_files/userfiles/files/coin-master-hack-apk-download-2021_GM406889139.pdf
- https://www.iosas.info/uploaded_files/userfiles/files/free-spins-for-coin-master-app_GM406889139.pdf
- https://www.iosas.info/uploaded_files/userfiles/files/roblox-jailbreak-beta-cheats_GM431946152.pdf
- https://www.iosas.info/uploaded_files/userfiles/files/earnbux-us-free-robux_GM431946152.pdf
- https://www.iosas.info/uploaded_files/userfiles/files/master-coin-free-spin_GM406889139.pdf
- https://www.iosas.info/uploaded_files/userfiles/files/game-hunters-coin-master_GM406889139.pdf
- https://www.iosas.info/uploaded_files/userfiles/files/adidas-t-shirt-for-roblox-free_GM431946152.pdf
- https://www.iosas.info/uploaded_files/userfiles/files/xray-hack_GM479516143.pdf
- https://www.iosas.info/uploaded_files/userfiles/files/roblox-bubble-chat-hack_GM431946152.pdf
- https://www.iosas.info/uploaded_files/userfiles/files/how-to-get-free-robux-instantly_GM431946152.pdf
- https://www.iosas.info/uploaded_files/userfiles/files/how-to-hack-coins-in-mcpe-master_GM406889139.pdf
- https://www.iosas.info/uploaded_files/userfiles/files/how-to-get-2021-free-robux-2021_GM431946152.pdf
- https://www.iosas.info/uploaded_files/userfiles/files/coin-master-hack-xyz-download_GM406889139.pdf
- https://www.iosas.info/uploaded_files/userfiles/files/roblox-exploit-hack-free-download_GM431946152.pdf
- https://www.iosas.info/uploaded_files/userfiles/files/easy-how-to-get-free-robux_GM431946152.pdf
- https://www.iosas.info/uploaded_files/userfiles/files/mathep_GM431946152.pdf
Embedded domains
- netcdn.tw
- www.iosas.info
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report