SUSPICIOUS — get-coin-master-spins-free_GM406889139.pdf
SUSPICIOUS — get-coin-master-spins-free_GM406889139.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (44/100). 5 of 53 detection engines flagged it.
Identification
- SHA-256:
b4684ab94b25677d49c77287c84bf81a4f515694ca3520aa71ace71f717e5d8a - SHA-1:
ff79571c9a82395c6077bb4cb5dbfb2416ebfff7 - MD5:
747c6b8dc294cfbdcb68c387530aca42 - ssdeep:
768:HLTbi/fmv60Fbmx8ZMYIcwKBR0g4BxQudMTsvCeI:rTu/f0bm4ylxxdOsvCeI - TLSH:
T1052F8DFB8097DC9C794B8B0375FA149D71CE9388B165CA50A1987B6CE4BC4BE2F10521 - Submitted as: get-coin-master-spins-free_GM406889139.pdf
- File type: pdf · Size: 35537 bytes
- Verdict: suspicious (44/100)
Detections (5 of 53 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Microsoft Defender: Trojan:PDF/Phish.CFN!MTB
- Emsisoft (Emergency Kit): PDF.Spam.Heur.2
- Trellix Stinger (McAfee): PDF/Phish-TWM!747C6B8DC294
- Kaspersky (KVRT): HEUR:Hoax.PDF.Phish.gen
Why this verdict
The suspicious score of 44/100 is the fusion of 3 weighted signals:
- Embedded network infrastructure: http://netcdn.tw/app/406889139/get-coin-master-spins-free-game-hack, https://www.wetotravels.com/uploaded_files/userfiles/files/free-robux-2021-no-human-verification_GM431946152.pdf, https://www.wetotravels.com/uploaded_files/userfiles/files/coin-master-heaven-free-daily-spins_GM406889139.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- http://netcdn.tw/app/406889139/get-coin-master-spins-free-game-hack
- https://www.wetotravels.com/uploaded_files/userfiles/files/free-robux-2021-no-human-verification_GM431946152.pdf
- https://www.wetotravels.com/uploaded_files/userfiles/files/coin-master-heaven-free-daily-spins_GM406889139.pdf
- https://www.wetotravels.com/uploaded_files/userfiles/files/how-to-hack-roblox-accounts-2021-on-ipad_GM431946152.pdf
- https://www.wetotravels.com/uploaded_files/userfiles/files/can-you-make-a-minecraft-server-for-free_GM479516143.pdf
- https://www.wetotravels.com/uploaded_files/userfiles/files/how-to-hack-roblox-rpg-games_GM431946152.pdf
- https://www.wetotravels.com/uploaded_files/userfiles/files/minecraft-jar-free_GM479516143.pdf
- https://www.wetotravels.com/uploaded_files/userfiles/files/can-you-get-robux-with-cheat-engine_GM431946152.pdf
- https://www.wetotravels.com/uploaded_files/userfiles/files/roblox-hackers-list_GM431946152.pdf
- https://www.wetotravels.com/uploaded_files/userfiles/files/coin-master-daily-free-spins-blogspot_GM406889139.pdf
- https://www.wetotravels.com/uploaded_files/userfiles/files/hack-roblox-players_GM431946152.pdf
- https://www.wetotravels.com/uploaded_files/userfiles/files/how-to-find-out-roblox-speed-code-for-speed-hack_GM431946152.pdf
- https://www.wetotravels.com/uploaded_files/userfiles/files/coin-master-cards_GM406889139.pdf
- https://www.wetotravels.com/uploaded_files/userfiles/files/girl-clothes-for-free-roblox_GM431946152.pdf
- https://www.wetotravels.com/uploaded_files/userfiles/files/coin-master-free-spins-link-blogspot_GM406889139.pdf
- https://www.wetotravels.com/uploaded_files/userfiles/files/free-robux-no-apps_GM431946152.pdf
- https://www.wetotravels.com/uploaded_files/userfiles/files/roblox-prison-life-hack_GM431946152.pdf
- https://www.wetotravels.com/uploaded_files/userfiles/files/jailbreak-geld-cheaten-roblox_GM431946152.pdf
- https://www.wetotravels.com/uploaded_files/userfiles/files/where-to-get-free-tiktok-likes_GM835599320.pdf
- https://www.wetotravels.com/uploaded_files/userfiles/files/roblox-instant-kill-hack_GM431946152.pdf
- https://www.wetotravels.com/uploaded_files/userfiles/files/inspect-robux-hack_GM431946152.pdf
Embedded domains
- netcdn.tw
- www.wetotravels.com
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report