SUSPICIOUS — free-robux-without-human-verification_GM431946152.pdf

SUSPICIOUS — free-robux-without-human-verification_GM431946152.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (44/100). 4 of 53 detection engines flagged it.

Identification

• SHA-256: 90e9a285f9f9fdcd4c550e69328c1fab8302db725d4fcec0d1be90ed9803a6c0
• SHA-1: 1d62fecfd9a6d0caa79a9c833d3aa62f8301be17
• MD5: 2ec0490cde60db8bcd9165f09dc1c68a
• ssdeep: 768:GdIS0jsnNuO949r58nR4N5pQeX1kz2Ptmzcu34k1LSh+s7:GGOyJOnR4N4X2PtmIu/LC+C
• TLSH: T179306CF70157CD1C7E8A9F079A76262DB4CDE7C960638E6084E83B2C906C6AE7F10561
• Submitted as: free-robux-without-human-verification_GM431946152.pdf
• File type: pdf · Size: 36797 bytes
• Verdict: suspicious (44/100)

Detections (4 of 53 engines)

• MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
• Microsoft Defender: Trojan:PDF/Phish.CFN!MTB
• Emsisoft (Emergency Kit): PDF.Spam.Heur.2
• Trellix Stinger (McAfee): PDF/Phish-TWM!2EC0490CDE60

Why this verdict

The suspicious score of 44/100 is the fusion of 3 weighted signals:

• Embedded network infrastructure: http://netcdn.tw/app/431946152/free-robux-without-human-verification-game-hack, https://elearning.mts-sukaramaiatas.sch.id/__statics/gudangsoal/files/static-moonactive-net-rewards-2021_GM406889139.pdf, https://elearning.mts-sukaramaiatas.sch.id/__statics/gudangsoal/files/robux-hack-free-robux_GM431946152.pdf - static signal, weight 0.35, confidence 0.60
• Document active content: uri-action - static signal, weight 0.30, confidence 0.60
• Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55

Dynamic analysis

No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.

Embedded URLs

• http://netcdn.tw/app/431946152/free-robux-without-human-verification-game-hack
• https://elearning.mts-sukaramaiatas.sch.id/__statics/gudangsoal/files/static-moonactive-net-rewards-2021_GM406889139.pdf
• https://elearning.mts-sukaramaiatas.sch.id/__statics/gudangsoal/files/robux-hack-free-robux_GM431946152.pdf
• https://elearning.mts-sukaramaiatas.sch.id/__statics/gudangsoal/files/give-me-free-robux_GM431946152.pdf
• https://elearning.mts-sukaramaiatas.sch.id/__statics/gudangsoal/files/get-free-robux-fast-and-easy_GM431946152.pdf
• https://elearning.mts-sukaramaiatas.sch.id/__statics/gudangsoal/files/roblox-online-free-to-play_GM431946152.pdf
• https://elearning.mts-sukaramaiatas.sch.id/__statics/gudangsoal/files/free-robux-codes-no-human-verification_GM431946152.pdf
• https://elearning.mts-sukaramaiatas.sch.id/__statics/gudangsoal/files/how-to-get-free-minecraft-windows-10_GM479516143.pdf
• https://elearning.mts-sukaramaiatas.sch.id/__statics/gudangsoal/files/minecraft-pe-apk-free-download_GM479516143.pdf
• https://elearning.mts-sukaramaiatas.sch.id/__statics/gudangsoal/files/roblox-survivalist-alpha-hack_GM431946152.pdf
• https://elearning.mts-sukaramaiatas.sch.id/__statics/gudangsoal/files/what-are-points-for-in-roblox_GM431946152.pdf
• https://elearning.mts-sukaramaiatas.sch.id/__statics/gudangsoal/files/free-robux-apk_GM431946152.pdf
• https://elearning.mts-sukaramaiatas.sch.id/__statics/gudangsoal/files/roblox-four-free-items_GM431946152.pdf
• https://elearning.mts-sukaramaiatas.sch.id/__statics/gudangsoal/files/roblox-phone-number-free-robux_GM431946152.pdf
• https://elearning.mts-sukaramaiatas.sch.id/__statics/gudangsoal/files/minecraft-free-school_GM479516143.pdf
• https://elearning.mts-sukaramaiatas.sch.id/__statics/gudangsoal/files/how-to-get-minecraft-for-free-on-android-device_GM479516143.pdf
• https://elearning.mts-sukaramaiatas.sch.id/__statics/gudangsoal/files/hack-my-spins-coin-master_GM406889139.pdf
• https://elearning.mts-sukaramaiatas.sch.id/__statics/gudangsoal/files/free-spins-coin-master-2021_GM406889139.pdf
• https://elearning.mts-sukaramaiatas.sch.id/__statics/gudangsoal/files/how-to-get-free-robux-on-ipad_GM431946152.pdf
• https://elearning.mts-sukaramaiatas.sch.id/__statics/gudangsoal/files/coin-master-free-cards_GM406889139.pdf
• https://elearning.mts-sukaramaiatas.sch.id/__statics/gudangsoal/files/bloxpink-free-robux_GM431946152.pdf

Embedded domains

• netcdn.tw
• elearning.mts-sukaramaiatas.sch.id

Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report