SUSPICIOUS — free-promo-codes-for-roblox-2021_GM431946152.pdf

SUSPICIOUS — free-promo-codes-for-roblox-2021_GM431946152.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (44/100). 4 of 53 detection engines flagged it.

Identification

• SHA-256: d4f0ef330fb5ccf823349c9f580c2cfaf0cb008d2987d0a3a50059744a15a71e
• SHA-1: a8eac5a9d4dfdc487d2ff512f6b54d93c38312fb
• MD5: 20f2cf26b44dd1f305b794554698a121
• ssdeep: 768:SmjYfeDqElMKOy2S1QZ3YqBua0Yj76/sHrZ5aK6uD11DDO5tcm6g9hiy8ksDf:SmjYfeGElMKOyD1QZJBua0Yj76cdN6yX
• TLSH: T1A2305CF70197CD0C7A4A9F076CBB549C25C9D38860629EA084D8B77CE0BCABEAF50551
• Submitted as: free-promo-codes-for-roblox-2021_GM431946152.pdf
• File type: pdf · Size: 36378 bytes
• Verdict: suspicious (44/100)

Detections (4 of 53 engines)

• MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
• Microsoft Defender: Trojan:PDF/Phish.CFN!MTB
• Emsisoft (Emergency Kit): PDF.Spam.Heur.2
• Trellix Stinger (McAfee): PDF/Phish-TWM!20F2CF26B44D

Why this verdict

The suspicious score of 44/100 is the fusion of 3 weighted signals:

• Embedded network infrastructure: http://netcdn.tw/app/431946152/free-promo-codes-for-roblox-2021-game-hack, http://www.smkrekayasa-dps.sch.id/new/public/ckfinder/userfiles/files/roblox-hack-all-game_GM431946152.pdf, http://www.smkrekayasa-dps.sch.id/new/public/ckfinder/userfiles/files/free-spins-coin-master-daily_GM406889139.pdf - static signal, weight 0.35, confidence 0.60
• Document active content: uri-action - static signal, weight 0.30, confidence 0.60
• Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55

Dynamic analysis

No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.

Embedded URLs

• http://netcdn.tw/app/431946152/free-promo-codes-for-roblox-2021-game-hack
• http://www.smkrekayasa-dps.sch.id/new/public/ckfinder/userfiles/files/roblox-hack-all-game_GM431946152.pdf
• http://www.smkrekayasa-dps.sch.id/new/public/ckfinder/userfiles/files/free-spins-coin-master-daily_GM406889139.pdf
• http://www.smkrekayasa-dps.sch.id/new/public/ckfinder/userfiles/files/minecraft-rtx-download-free_GM479516143.pdf
• http://www.smkrekayasa-dps.sch.id/new/public/ckfinder/userfiles/files/cool-free-roblox-charecters-uu_GM431946152.pdf
• http://www.smkrekayasa-dps.sch.id/new/public/ckfinder/userfiles/files/minecraft-pe-apk-download_GM479516143.pdf
• http://www.smkrekayasa-dps.sch.id/new/public/ckfinder/userfiles/files/free-roblox-rom_GM431946152.pdf
• http://www.smkrekayasa-dps.sch.id/new/public/ckfinder/userfiles/files/roblox-retail-tycoon-xbox-one-cheats_GM431946152.pdf
• http://www.smkrekayasa-dps.sch.id/new/public/ckfinder/userfiles/files/how-do-u-get-roblocks-on-roblox-for-free_GM431946152.pdf
• http://www.smkrekayasa-dps.sch.id/new/public/ckfinder/userfiles/files/roblox-cheat-codes-mobile_GM431946152.pdf
• http://www.smkrekayasa-dps.sch.id/new/public/ckfinder/userfiles/files/give-me-free-robux_GM431946152.pdf
• http://www.smkrekayasa-dps.sch.id/new/public/ckfinder/userfiles/files/account-hacker-roblox-pastebin_GM431946152.pdf
• http://www.smkrekayasa-dps.sch.id/new/public/ckfinder/userfiles/files/roblox-buiders-club-free_GM431946152.pdf
• http://www.smkrekayasa-dps.sch.id/new/public/ckfinder/userfiles/files/roblox-koi-hack_GM431946152.pdf
• http://www.smkrekayasa-dps.sch.id/new/public/ckfinder/userfiles/files/someone-has-hacked-into-my-roblox-account_GM431946152.pdf
• http://www.smkrekayasa-dps.sch.id/new/public/ckfinder/userfiles/files/free-tiktok-followers-instantly_GM835599320.pdf
• http://www.smkrekayasa-dps.sch.id/new/public/ckfinder/userfiles/files/free-robux-without-verification_GM431946152.pdf
• http://www.smkrekayasa-dps.sch.id/new/public/ckfinder/userfiles/files/free-robux-get-game-resources_GM431946152.pdf
• http://www.smkrekayasa-dps.sch.id/new/public/ckfinder/userfiles/files/free-daily-spin-coin-master-game_GM406889139.pdf
• http://www.smkrekayasa-dps.sch.id/new/public/ckfinder/userfiles/files/robux-gift-card-free_GM431946152.pdf
• http://www.smkrekayasa-dps.sch.id/new/public/ckfinder/userfiles/files/how-to-get-games-for-free-roblox-hack_GM431946152.pdf

Embedded domains

• netcdn.tw
• www.smkrekayasa-dps.sch.id

Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report