SUSPICIOUS — free-robux-pin-codes_GM431946152.pdf

SUSPICIOUS — free-robux-pin-codes_GM431946152.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (44/100). 1 of 53 detection engines flagged it.

Identification

• SHA-256: c06a047e9ca7652d6e21c1ad3cc81e51f278080e5e83d42182d0e5a998b509ec
• SHA-1: 9cb5d4e8330b6d43a5ef40dc3f3ca8ba4a048040
• MD5: cd06247379f0a666bd527f96890905f3
• ssdeep: 768:CpMetFEaNZAQ9jj44d5HhAXjsyWxK9WlBmg+GuKS4jeRBiUMxkELkpMyXlHYgVvU:0CWxK2ek+EgC0lHYg9EC46C
• TLSH: T15B2F7DF7214BDC641E818F879AF401A57A48D64CB2A06E8041987BBCC8357FD9751AB1
• Submitted as: free-robux-pin-codes_GM431946152.pdf
• File type: pdf · Size: 35469 bytes
• Verdict: suspicious (44/100)

Detections (1 of 53 engines)

• MalwareAnalyser heuristics (entropy/packer): high-entropy-blob

Why this verdict

The suspicious score of 44/100 is the fusion of 3 weighted signals:

• Embedded network infrastructure: http://jobsflow.net/pdf/netcdn.tw/app/431946152/free-robux-pin-codes-game-hack, https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/how-to-get-free-robux-2021-no-human-verification_gm431946152.pdf, https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/roblox-best-free-models_gm431946152.pdf - static signal, weight 0.35, confidence 0.60
• Document active content: uri-action - static signal, weight 0.30, confidence 0.60
• Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55

Dynamic analysis

No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.

Embedded URLs

• http://jobsflow.net/pdf/netcdn.tw/app/431946152/free-robux-pin-codes-game-hack
• https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/how-to-get-free-robux-2021-no-human-verification_gm431946152.pdf
• https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/roblox-best-free-models_gm431946152.pdf
• https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/free-accounts-and-passwords-for-roblox_gm431946152.pdf
• https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/free-hacks-for-coin-master_gm406889139.pdf
• https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/robux-hack-no-download-or-verification_gm431946152.pdf
• https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/how-to-get-roblox-hacks-on-mac_gm431946152.pdf
• https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/how-to-instantly-get-free-robux-in-roblox-2021-oprewards_gm431946152.pdf
• https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/coin-master-hacks-free-spins_gm406889139.pdf
• https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/how-to-bypass-roblox-cheat-engine_gm431946152.pdf
• https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/how-to-hack-lumber-tycoon-2-on-roblox_gm431946152.pdf
• https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/how-to-hack-roblox-exploits_gm431946152.pdf
• https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/get-free-robux_gm431946152.pdf
• https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/free-roblox-accounts-20212021_gm431946152.pdf
• https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/coin-master-free-spins-for-today_gm406889139.pdf
• https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/coin-master-free-spins-link-today-new_gm406889139.pdf
• https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/hack-roblox-a-telecharger-gratuit_gm431946152.pdf
• https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/free-minecraft-texture-packs_gm479516143.pdf
• https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/hack-para-coin-master-singapore_gm406889139.pdf
• https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/hack-coin-master-with-lucky-patcher_gm406889139.pdf
• https://jobsflow.net/pdf/privatearrangements.co.nz/public/files/free-roam-roblox-survival_gm431946152.pdf
• http://www.w3.org/1999/02/22-rdf-syntax-ns#

Embedded domains

• jobsflow.net
• netcdn.tw
• www.w3.org

Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report