SUSPICIOUS — get-free-robux-gg_GM431946152.pdf
SUSPICIOUS — get-free-robux-gg_GM431946152.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (44/100). 4 of 53 detection engines flagged it.
Identification
- SHA-256:
c7120dcb47794c77076f89cadc9570db94a7b0d935736ad7bf4088a43a23aa63 - SHA-1:
062585dbb81883c09a451cbf3ee31507eb925533 - MD5:
f6970f808afcdcb6fed6ea5561f7b1e2 - ssdeep:
768:7AoOzfSaf8sstwlHV3oSKfw6gXN3cKljNTikR:7AbzfFf8/wBFhpikR - TLSH:
T13B2F6CF74197CC1CBE86DF076DBA25292889D38AB0A1C92061D8776CD0BC6AE7F11531 - Submitted as: get-free-robux-gg_GM431946152.pdf
- File type: pdf · Size: 35086 bytes
- Verdict: suspicious (44/100)
Detections (4 of 53 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Microsoft Defender: Trojan:PDF/Phish.CFN!MTB
- Emsisoft (Emergency Kit): PDF.Spam.Heur.2
- Trellix Stinger (McAfee): PDF/Phish-TWM!F6970F808AFC
Why this verdict
The suspicious score of 44/100 is the fusion of 3 weighted signals:
- Embedded network infrastructure: http://netcdn.tw/app/431946152/get-free-robux-gg-game-hack, https://www.anders-sofa.com.tw/uploadpic/files/free-spin-link-for-coin-master-game_GM406889139.pdf, https://www.anders-sofa.com.tw/uploadpic/files/roblox-accounts-free-no-security_GM431946152.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- http://netcdn.tw/app/431946152/get-free-robux-gg-game-hack
- https://www.anders-sofa.com.tw/uploadpic/files/free-spin-link-for-coin-master-game_GM406889139.pdf
- https://www.anders-sofa.com.tw/uploadpic/files/roblox-accounts-free-no-security_GM431946152.pdf
- https://www.anders-sofa.com.tw/uploadpic/files/descargar-roblox-hackeado-adopt-me-para-pc_GM431946152.pdf
- https://www.anders-sofa.com.tw/uploadpic/files/minecraft-hacked-client_GM479516143.pdf
- https://www.anders-sofa.com.tw/uploadpic/files/roblox-free-rare-hat_GM431946152.pdf
- https://www.anders-sofa.com.tw/uploadpic/files/coin-master-fun-hack_GM406889139.pdf
- https://www.anders-sofa.com.tw/uploadpic/files/how-to-robux_GM431946152.pdf
- https://www.anders-sofa.com.tw/uploadpic/files/play-minecraft-free-online-no-download_GM479516143.pdf
- https://www.anders-sofa.com.tw/uploadpic/files/roblox-breaking-point-script-hack_GM431946152.pdf
- https://www.anders-sofa.com.tw/uploadpic/files/free-black-and-white-roblox_GM431946152.pdf
- https://www.anders-sofa.com.tw/uploadpic/files/how-to-disco-hack-roblox-games_GM431946152.pdf
- https://www.anders-sofa.com.tw/uploadpic/files/whats-robux_GM431946152.pdf
- https://www.anders-sofa.com.tw/uploadpic/files/hack-roblox-using-command-prompt_GM431946152.pdf
- https://www.anders-sofa.com.tw/uploadpic/files/how-to-get-free-obc-and-robux_GM431946152.pdf
- https://www.anders-sofa.com.tw/uploadpic/files/free-cute-roblox-faces_GM431946152.pdf
- https://www.anders-sofa.com.tw/uploadpic/files/how-to-hack-roblox-accounts-for-robux_GM431946152.pdf
- https://www.anders-sofa.com.tw/uploadpic/files/free-robux-logo_GM431946152.pdf
- https://www.anders-sofa.com.tw/uploadpic/files/rbxdemon_GM431946152.pdf
- https://www.anders-sofa.com.tw/uploadpic/files/coin-master-free-spins-for-today_GM406889139.pdf
- https://www.anders-sofa.com.tw/uploadpic/files/free-robux-generator-com-roblox-hack_GM431946152.pdf
Embedded domains
- netcdn.tw
- www.anders-sofa.com.tw
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report