SUSPICIOUS — free-mojang-account-with-minecraft_GM479516143.pdf
SUSPICIOUS — free-mojang-account-with-minecraft_GM479516143.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (44/100). 5 of 53 detection engines flagged it.
Identification
- SHA-256:
b18ae39b4b3a8bb4e6af893d5dbedce5ab48fb5ec019c942ece4ca556a169a50 - SHA-1:
aad436337f0ebd35ba4857218541307d40359bfc - MD5:
ac0f60d57b9e86852325b71560a88c5e - ssdeep:
768:CczbuiRCUbWLbxVDV9cWI4xVPDFwb4eenWvtNPpWyI1Py2UE:l0UI9cW3PDI4ebPPpTDDE - TLSH:
T12E329EF75097CD3C6E859F53A8B7216E6459D3C825629A5260D47B2C807CAFEFF00A20 - Submitted as: free-mojang-account-with-minecraft_GM479516143.pdf
- File type: pdf · Size: 46362 bytes
- Verdict: suspicious (44/100)
Detections (5 of 53 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Microsoft Defender: Trojan:PDF/Phish.CFN!MTB
- Emsisoft (Emergency Kit): PDF.Spam.Heur.2
- Trellix Stinger (McAfee): PDF/Phish-TWM!AC0F60D57B9E
- Kaspersky (KVRT): HEUR:Hoax.PDF.Phish.gen
Why this verdict
The suspicious score of 44/100 is the fusion of 3 weighted signals:
- Embedded network infrastructure: https://netcdn.xyz/app/479516143/free-mojang-account-with-minecraft-game-hack, https://www.sonestad.se/library/repository/strucid-aimbot_GM431946152.pdf, https://www.sonestad.se/library/repository/mcpe-master-unlimited-coins-free-download_GM406889139.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- https://netcdn.xyz/app/479516143/free-mojang-account-with-minecraft-game-hack
- https://www.sonestad.se/library/repository/strucid-aimbot_GM431946152.pdf
- https://www.sonestad.se/library/repository/mcpe-master-unlimited-coins-free-download_GM406889139.pdf
- https://www.sonestad.se/library/repository/how-to-get-free-roblox-gift-cards_GM431946152.pdf
- https://www.sonestad.se/library/repository/coin-master-34-4-hack_GM406889139.pdf
- https://www.sonestad.se/library/repository/free-coin-master-spins-hack_GM406889139.pdf
- https://www.sonestad.se/library/repository/coin-master-daily-free-spins-link-today-2021_GM406889139.pdf
- https://www.sonestad.se/library/repository/free-coins-coin-master-link-today_GM406889139.pdf
- https://www.sonestad.se/library/repository/minecraft-for-free-apk_GM479516143.pdf
- https://www.sonestad.se/library/repository/spin-links-for-coin-master_GM406889139.pdf
- https://www.sonestad.se/library/repository/coin-master-hoe-to-get-extra-free-spins_GM406889139.pdf
- https://www.sonestad.se/library/repository/how-to-hack-coin-master-pc_GM406889139.pdf
- https://www.sonestad.se/library/repository/hack-coin-master-app-ios_GM406889139.pdf
- https://www.sonestad.se/library/repository/how-to-hack-coin-master-with-root_GM406889139.pdf
- https://www.sonestad.se/library/repository/minecraft-xbox-one-edition-digital-code-free_GM479516143.pdf
- https://www.sonestad.se/library/repository/gold-cards-coin-master-hack_GM406889139.pdf
- https://www.sonestad.se/library/repository/roblox-redeem-codes-free_GM431946152.pdf
- https://www.sonestad.se/library/repository/how-to-get-java-minecraft-for-free_GM479516143.pdf
- https://www.sonestad.se/library/repository/robux-hack-me_GM431946152.pdf
- https://www.sonestad.se/library/repository/coin-master-hacks-iphone_GM406889139.pdf
- https://www.sonestad.se/library/repository/free-spins-coin-master-2021_GM406889139.pdf
Embedded domains
- netcdn.xyz
- www.sonestad.se
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report