SUSPICIOUS — how-to-use-hacks-on-any-game-on-roblox_GM431946152.pdf

SUSPICIOUS — how-to-use-hacks-on-any-game-on-roblox_GM431946152.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (44/100). 5 of 53 detection engines flagged it.

Identification

• SHA-256: d49bc5eeda0a26842bd193c7d7f3abde3ded4c7d4fadc7616cc832367e96cbe6
• SHA-1: badcfaf394d8c19ce204706d0604e2537182f6a1
• MD5: e8509813bd8c17e49a98dc5b6320fedb
• ssdeep: 768:yx6WEs3eMxs6Or76hCToLsSXuTAQmdH7:YdXeMBOr2CJSXuMH7
• TLSH: T1D4307DF7116BDC0C7A4B8F13AD76206CB5C9E388A432D94095E876BDC06CABD7B105A1
• Submitted as: how-to-use-hacks-on-any-game-on-roblox_GM431946152.pdf
• File type: pdf · Size: 36180 bytes
• Verdict: suspicious (44/100)

Detections (5 of 53 engines)

• MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
• Microsoft Defender: Trojan:PDF/Phish.CFN!MTB
• Emsisoft (Emergency Kit): PDF.Spam.Heur.2
• Trellix Stinger (McAfee): PDF/Phish-TWM!E8509813BD8C
• Kaspersky (KVRT): HEUR:Hoax.PDF.Phish.gen

Why this verdict

The suspicious score of 44/100 is the fusion of 3 weighted signals:

• Embedded network infrastructure: http://netcdn.co/app/431946152/how-to-use-hacks-on-any-game-on-roblox-game-hack, http://perpustakaan.pn-tapaktuan.go.id/repository/free-stuff-to-get-in-roblox_GM431946152.pdf, http://perpustakaan.pn-tapaktuan.go.id/repository/roblox-free-robux-hack-mod-apk-download_GM431946152.pdf - static signal, weight 0.35, confidence 0.60
• Document active content: uri-action - static signal, weight 0.30, confidence 0.60
• Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55

Dynamic analysis

No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.

Embedded URLs

• http://netcdn.co/app/431946152/how-to-use-hacks-on-any-game-on-roblox-game-hack
• http://perpustakaan.pn-tapaktuan.go.id/repository/free-stuff-to-get-in-roblox_GM431946152.pdf
• http://perpustakaan.pn-tapaktuan.go.id/repository/roblox-free-robux-hack-mod-apk-download_GM431946152.pdf
• http://perpustakaan.pn-tapaktuan.go.id/repository/free-robux-images_GM431946152.pdf
• http://perpustakaan.pn-tapaktuan.go.id/repository/cute-free-hair-on-roblox_GM431946152.pdf
• http://perpustakaan.pn-tapaktuan.go.id/repository/how-to-get-free-clothes-on-roblox-2021-no-bc_GM431946152.pdf
• http://perpustakaan.pn-tapaktuan.go.id/repository/can-i-hack-coin-master-with-lucky-patcher_GM406889139.pdf
• http://perpustakaan.pn-tapaktuan.go.id/repository/is-there-a-way-to-get-free-robux_GM431946152.pdf
• http://perpustakaan.pn-tapaktuan.go.id/repository/hey-google-how-do-you-get-free-robux_GM431946152.pdf
• http://perpustakaan.pn-tapaktuan.go.id/repository/test-for-free-robux_GM431946152.pdf
• http://perpustakaan.pn-tapaktuan.go.id/repository/how-to-get-free-robux-without-verification_GM431946152.pdf
• http://perpustakaan.pn-tapaktuan.go.id/repository/free-robux-on-iphone_GM431946152.pdf
• http://perpustakaan.pn-tapaktuan.go.id/repository/minecraft-for-free-apk_GM479516143.pdf
• http://perpustakaan.pn-tapaktuan.go.id/repository/minecraft-hack-app_GM479516143.pdf
• http://perpustakaan.pn-tapaktuan.go.id/repository/roblox-cheats-november-2021_GM431946152.pdf
• http://perpustakaan.pn-tapaktuan.go.id/repository/coin-master-link-daily-get-free-spins-amp_GM406889139.pdf
• http://perpustakaan.pn-tapaktuan.go.id/repository/free-robux-give-away-live_GM431946152.pdf
• http://perpustakaan.pn-tapaktuan.go.id/repository/lingojam-roblox-hack_GM431946152.pdf
• http://perpustakaan.pn-tapaktuan.go.id/repository/roblox-hacks-for-mac_GM431946152.pdf
• http://perpustakaan.pn-tapaktuan.go.id/repository/how-to-get-free-1-million-robux_GM431946152.pdf
• http://perpustakaan.pn-tapaktuan.go.id/repository/free-robux-logo_GM431946152.pdf

Embedded domains

• netcdn.co
• perpustakaan.pn-tapaktuan.go.id

Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report