SUSPICIOUS — easy-robux-hack_GM431946152.pdf

SUSPICIOUS — easy-robux-hack_GM431946152.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (58/100). 4 of 53 detection engines flagged it, exhibiting 1 ATT&CK technique.

Identification

SHA-256: f2c7d88d2e0554b964a757414d10f28e2e3e9823b9c28510fdf815e15f5eede5
SHA-1: c4df64b56a0b698006989435afcd9231cf838d2c
MD5: 03050b74a3089eee76c78e0e68423153
ssdeep: 384:mHHypE5mZNCZmTrH92sSyD8KvIwIEO/M/U+4ITPa+ACwfCUSk821qP3ncWn219bf:SHyAmemPQsLpgbEOUU+4AECCincqJu
TLSH: T1A12F7CF710ABCC4C7F8B8F836976025A75CBE28861A6CE4155D8772D807C6EEAF50610
Submitted as: easy-robux-hack_GM431946152.pdf
File type: pdf · Size: 35453 bytes
Verdict: suspicious (58/100)

Detections (4 of 53 engines)

MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
Microsoft Defender: flagged
Emsisoft (Emergency Kit): PDF.Spam.Heur.2
Trellix Stinger (McAfee): PDF/Phish-TWM!03050B74A308

MITRE ATT&CK

T1566.002

Why this verdict

The suspicious score of 58/100 is the fusion of 4 weighted signals:

Embedded link rated suspicious by URL analysis: http://sistem.amikomsolo.ac.id/perpus/repository/free-minecraft-hacks_GM479516143.pdf - network signal, weight 0.40, confidence 0.60
Embedded network infrastructure: http://netcdn.tw/app/431946152/easy-robux-hack-game-hack, http://sistem.amikomsolo.ac.id/perpus/repository/free-minecraft-hacks_GM479516143.pdf, http://sistem.amikomsolo.ac.id/perpus/repository/fb-coin-master-hack_GM406889139.pdf - static signal, weight 0.35, confidence 0.60
Document active content: uri-action - static signal, weight 0.30, confidence 0.60
Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55

Dynamic analysis

No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.

Embedded URLs

http://netcdn.tw/app/431946152/easy-robux-hack-game-hack
http://sistem.amikomsolo.ac.id/perpus/repository/free-minecraft-hacks_GM479516143.pdf
http://sistem.amikomsolo.ac.id/perpus/repository/fb-coin-master-hack_GM406889139.pdf
http://sistem.amikomsolo.ac.id/perpus/repository/how-to-hack-royale-high-on-roblox_GM431946152.pdf
http://sistem.amikomsolo.ac.id/perpus/repository/how-to-hack-out-of-bank-roblox_GM431946152.pdf
http://sistem.amikomsolo.ac.id/perpus/repository/how-to-have-a-cool-roblox-avatar-for-free_GM431946152.pdf
http://sistem.amikomsolo.ac.id/perpus/repository/roblox-hack-how-to-get-free-robux-2021_GM431946152.pdf
http://sistem.amikomsolo.ac.id/perpus/repository/the-app-that-gives-you-free-robux_GM431946152.pdf
http://sistem.amikomsolo.ac.id/perpus/repository/coin-hackhub-coin-master_GM406889139.pdf
http://sistem.amikomsolo.ac.id/perpus/repository/free-tiktok-followers-and-likes-no-human-verification_GM835599320.pdf
http://sistem.amikomsolo.ac.id/perpus/repository/free-robux-games_GM431946152.pdf
http://sistem.amikomsolo.ac.id/perpus/repository/games-in-roblox-to-get-free-robux_GM431946152.pdf
http://sistem.amikomsolo.ac.id/perpus/repository/roblox-robux-hack-2021-no-survey-no-download_GM431946152.pdf
http://sistem.amikomsolo.ac.id/perpus/repository/roblox-create-free-group_GM431946152.pdf
http://sistem.amikomsolo.ac.id/perpus/repository/free-robux-2021-may_GM431946152.pdf
http://sistem.amikomsolo.ac.id/perpus/repository/how-to-hack-roblox-ninja-assassin_GM431946152.pdf
http://sistem.amikomsolo.ac.id/perpus/repository/guess-the-song-roblox-cheat-sheet_GM431946152.pdf
http://sistem.amikomsolo.ac.id/perpus/repository/synapse-x-roblox-free-download-2021_GM431946152.pdf
http://sistem.amikomsolo.ac.id/perpus/repository/beast-mode-face-roblox-free_GM431946152.pdf
http://sistem.amikomsolo.ac.id/perpus/repository/free-robux-promo-codes-2021_GM431946152.pdf
http://sistem.amikomsolo.ac.id/perpus/repository/robloxfun-com-robux_GM431946152.pdf

Embedded domains

netcdn.tw
sistem.amikomsolo.ac.id

Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report