SUSPICIOUS — free-spins-coin-master-links_GM406889139.pdf
SUSPICIOUS — free-spins-coin-master-links_GM406889139.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (44/100). 5 of 53 detection engines flagged it.
Identification
- SHA-256:
edf53055fbb6c6cbb829fc12eb17c3a37bb21f34c5021f9f869c3c203523966b - SHA-1:
29ed0151dda438278ed864db7fb8af82b185390f - MD5:
79988cc20eafa27241e79097f6d9e72a - ssdeep:
768:BUnWYUh2Co/tyHnHAOFstSWWWp/ZolS2XPp9q4ex9ij:e2zo/qgA6SK/ZqS2x9U9E - TLSH:
T1F9327DF71147DC4C368ECB13A9FA646DA49DE2886192DE4051987A7CD0BCBFE6F00A11 - Submitted as: free-spins-coin-master-links_GM406889139.pdf
- File type: pdf · Size: 46061 bytes
- Verdict: suspicious (44/100)
Detections (5 of 53 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Microsoft Defender: Trojan:PDF/Phish.CFN!MTB
- Emsisoft (Emergency Kit): PDF.Spam.Heur.2
- Trellix Stinger (McAfee): PDF/Phish-TWM!79988CC20EAF
- Kaspersky (KVRT): HEUR:Hoax.PDF.Phish.gen
Why this verdict
The suspicious score of 44/100 is the fusion of 3 weighted signals:
- Embedded network infrastructure: https://netcdn.xyz/app/406889139/free-spins-coin-master-links-game-hack, https://mountainholidaytreks.com/userfiles/files/how-to-get-minecraft-for-free-on-phone_GM479516143.pdf, https://mountainholidaytreks.com/userfiles/files/free-spins-coin-master-haktuts_GM406889139.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- https://netcdn.xyz/app/406889139/free-spins-coin-master-links-game-hack
- https://mountainholidaytreks.com/userfiles/files/how-to-get-minecraft-for-free-on-phone_GM479516143.pdf
- https://mountainholidaytreks.com/userfiles/files/free-spins-coin-master-haktuts_GM406889139.pdf
- https://mountainholidaytreks.com/userfiles/files/coin-master-game-hacks_GM406889139.pdf
- https://mountainholidaytreks.com/userfiles/files/roblox-free-robux-codes_GM431946152.pdf
- https://mountainholidaytreks.com/userfiles/files/prison-life-roblox-hacks_GM431946152.pdf
- https://mountainholidaytreks.com/userfiles/files/rbxoffer-com-free-robux_GM431946152.pdf
- https://mountainholidaytreks.com/userfiles/files/minecraft-112-2-hacked-client_GM479516143.pdf
- https://mountainholidaytreks.com/userfiles/files/earn-free-robux_GM431946152.pdf
- https://mountainholidaytreks.com/userfiles/files/how-to-hack-coin-master-game-2021_GM406889139.pdf
- https://mountainholidaytreks.com/userfiles/files/how-to-get-free-robux-on-phone_GM431946152.pdf
- https://mountainholidaytreks.com/userfiles/files/free-robux-link_GM431946152.pdf
- https://mountainholidaytreks.com/userfiles/files/how-to-get-free-robux-no-scam_GM431946152.pdf
- https://mountainholidaytreks.com/userfiles/files/how-to-get-robux-for-free-2021_GM431946152.pdf
- https://mountainholidaytreks.com/userfiles/files/how-to-get-free-robux-easy-2021_GM431946152.pdf
- https://mountainholidaytreks.com/userfiles/files/how-to-get-creative-mode-in-minecraft-server-hack_GM479516143.pdf
- https://mountainholidaytreks.com/userfiles/files/coin-master-free-spins-link-blogspot_GM406889139.pdf
- https://mountainholidaytreks.com/userfiles/files/coin-master-hack-android-root_GM406889139.pdf
- https://mountainholidaytreks.com/userfiles/files/roblox-money-hack_GM431946152.pdf
- https://mountainholidaytreks.com/userfiles/files/how-to-actually-get-free-robux_GM431946152.pdf
- https://mountainholidaytreks.com/userfiles/files/coin-master-hack-pro-gamers_GM406889139.pdf
Embedded domains
- netcdn.xyz
- mountainholidaytreks.com
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report