SUSPICIOUS — free-robux-glitch-2021_GM431946152.pdf
SUSPICIOUS — free-robux-glitch-2021_GM431946152.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (44/100). 4 of 53 detection engines flagged it.
Identification
- SHA-256:
d8d948dcb9bccc0c67f7d0ef2178f57da767d9dbe26b257f1a5f282767f96d58 - SHA-1:
dc5a203a83e71df92224c8430dc19ee45b400969 - MD5:
e6a4b47ae30be9bc044d637b2f6a8862 - ssdeep:
384:Y3BmRlgoSBLRz/q4CqINi05bvUUkEuRTxCLrVHCUSkQpnqGPVF1Ra0wSkHCUS9K:Ycl2Rz/PIN7bs64dCp2VHFPY0K - TLSH:
T13D2F8EF7109BEC1C7A899F0399B7245E24CE978C7132DA9085E8776C903CAFE6B10611 - Submitted as: free-robux-glitch-2021_GM431946152.pdf
- File type: pdf · Size: 33939 bytes
- Verdict: suspicious (44/100)
Detections (4 of 53 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Microsoft Defender: Trojan:PDF/Phish.CFN!MTB
- Emsisoft (Emergency Kit): PDF.Spam.Heur.2
- Trellix Stinger (McAfee): PDF/Phish-TWM!E6A4B47AE30B
Why this verdict
The suspicious score of 44/100 is the fusion of 3 weighted signals:
- Embedded network infrastructure: http://netcdn.co/app/431946152/free-robux-glitch-2021-game-hack, https://koeltotaal.com/images/how-to-get-free-robux-on-chromebook_GM431946152.pdf, https://koeltotaal.com/images/roblox-hack-for-robux-kredi-kart_GM431946152.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- http://netcdn.co/app/431946152/free-robux-glitch-2021-game-hack
- https://koeltotaal.com/images/how-to-get-free-robux-on-chromebook_GM431946152.pdf
- https://koeltotaal.com/images/roblox-hack-for-robux-kredi-kart_GM431946152.pdf
- https://koeltotaal.com/images/promo-codes-for-free-robux_GM431946152.pdf
- https://koeltotaal.com/images/cracked-free-roblox_GM431946152.pdf
- https://koeltotaal.com/images/free-roblox-cards-2021_GM431946152.pdf
- https://koeltotaal.com/images/roblox-hack-site-simplesite_GM431946152.pdf
- https://koeltotaal.com/images/free-roblox-codes-october-2021_GM431946152.pdf
- https://koeltotaal.com/images/roblox-cheat-codes-for-iphone_GM431946152.pdf
- https://koeltotaal.com/images/free-spin-app-for-coin-master_GM406889139.pdf
- https://koeltotaal.com/images/coin-master-32-hack-apk-download_GM406889139.pdf
- https://koeltotaal.com/images/roblox-bleach-shikai-hack-script_GM431946152.pdf
- https://koeltotaal.com/images/how-to-make-free-robux-with-bc_GM431946152.pdf
- https://koeltotaal.com/images/how-to-get-free-rocket-fuel-roblox-jailbreak_GM431946152.pdf
- https://koeltotaal.com/images/dragon-ball-rage-roblox-cheats_GM431946152.pdf
- https://koeltotaal.com/images/robuxmatchcom-free-robux_GM431946152.pdf
- https://koeltotaal.com/images/nope-hack-roblox-cheat-engine-64_GM431946152.pdf
- https://koeltotaal.com/images/free-coin-master-androd-cheats-2021_GM406889139.pdf
- https://koeltotaal.com/images/free-robux-come_GM431946152.pdf
- https://koeltotaal.com/images/roblox-hack-999999-robux-tablet_GM431946152.pdf
- https://koeltotaal.com/images/roblox-dragon-ball-rage-cheat-engine_GM431946152.pdf
Embedded domains
- netcdn.co
- koeltotaal.com
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report