SUSPICIOUS — roblox-glitches-and-cheats-2021_GM431946152.pdf

SUSPICIOUS — roblox-glitches-and-cheats-2021_GM431946152.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (58/100). 5 of 53 detection engines flagged it, exhibiting 1 ATT&CK technique.

Identification

• SHA-256: ad839f12c9c329aecb57ad341c7b9bc8ef8607e1ec6de043f91316e6d7649ec3
• SHA-1: 502b0f77e92dd5d1e4e27cfc32f7ea3b66f78a20
• MD5: 90836ff96296f610fd09cb422af4ab98
• ssdeep: 768:quiKMqZzAG2L156087xs7Cad3uoWgm/jS3C1YWzME8V:XfVb2pEPZ7orwjaE8V
• TLSH: T14E2F7EF70167CC0C7A8A9B03A9BB162D74CAD788B032DA1155D4777C90AC6EFAB10664
• Submitted as: roblox-glitches-and-cheats-2021_GM431946152.pdf
• File type: pdf · Size: 35345 bytes
• Verdict: suspicious (58/100)

Detections (5 of 53 engines)

• MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
• Microsoft Defender: Trojan:PDF/Phish.CFN!MTB
• Emsisoft (Emergency Kit): PDF.Spam.Heur.2
• Trellix Stinger (McAfee): PDF/Phish-TWM!90836FF96296
• Kaspersky (KVRT): HEUR:Hoax.PDF.Phish.gen

MITRE ATT&CK

• T1566.002

Why this verdict

The suspicious score of 58/100 is the fusion of 4 weighted signals:

• Embedded link rated suspicious by URL analysis: http://lib.stie-aub.ac.id/repository/5-roblox-games-that-give-you-free-robux_GM431946152.pdf - network signal, weight 0.40, confidence 0.60
• Embedded network infrastructure: http://netcdn.co/app/431946152/roblox-glitches-and-cheats-2021-game-hack, http://lib.stie-aub.ac.id/repository/5-roblox-games-that-give-you-free-robux_GM431946152.pdf, http://lib.stie-aub.ac.id/repository/coin-master-date-and-time-hack_GM406889139.pdf - static signal, weight 0.35, confidence 0.60
• Document active content: uri-action - static signal, weight 0.30, confidence 0.60
• Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55

Dynamic analysis

No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.

Embedded URLs

• http://netcdn.co/app/431946152/roblox-glitches-and-cheats-2021-game-hack
• http://lib.stie-aub.ac.id/repository/5-roblox-games-that-give-you-free-robux_GM431946152.pdf
• http://lib.stie-aub.ac.id/repository/coin-master-date-and-time-hack_GM406889139.pdf
• http://lib.stie-aub.ac.id/repository/roblox-games-that-give-you-free-robux_GM431946152.pdf
• http://lib.stie-aub.ac.id/repository/elemental-wars-hack-roblox-site-v3rmillionnet_GM431946152.pdf
• http://lib.stie-aub.ac.id/repository/roblox-computer-game-free_GM431946152.pdf
• http://lib.stie-aub.ac.id/repository/how-to-get-free-robux-without-downloading-any-apps_GM431946152.pdf
• http://lib.stie-aub.ac.id/repository/free-gift-cards-roblox-2021_GM431946152.pdf
• http://lib.stie-aub.ac.id/repository/114-4-hacks_GM479516143.pdf
• http://lib.stie-aub.ac.id/repository/cars-watch-videos-free-robux_GM431946152.pdf
• http://lib.stie-aub.ac.id/repository/hacks-roblox-pc_GM431946152.pdf
• http://lib.stie-aub.ac.id/repository/hack-roblox-2021-savanna-wild_GM431946152.pdf
• http://lib.stie-aub.ac.id/repository/minecraft-cheats-pc-2021_GM479516143.pdf
• http://lib.stie-aub.ac.id/repository/coin-master-hack-apk-july-2021_GM406889139.pdf
• http://lib.stie-aub.ac.id/repository/roblox-games-that-promise-free-robux_GM431946152.pdf
• http://lib.stie-aub.ac.id/repository/hacking-a-roblox-fans_GM431946152.pdf
• http://lib.stie-aub.ac.id/repository/descarga-de-roblox-hackeado-robux_GM431946152.pdf
• http://lib.stie-aub.ac.id/repository/roblox-got-talent-piano-hack_GM431946152.pdf
• http://lib.stie-aub.ac.id/repository/hack-dungeon-quest-roblox_GM431946152.pdf
• http://lib.stie-aub.ac.id/repository/roblox-mining-simulator-hack-2021_GM431946152.pdf
• http://lib.stie-aub.ac.id/repository/robux-redeem-card-hack_GM431946152.pdf

Embedded domains

• netcdn.co
• lib.stie-aub.ac.id

Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report