SUSPICIOUS — hack-to-find-youtubers-roblox_GM431946152.pdf
SUSPICIOUS — hack-to-find-youtubers-roblox_GM431946152.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (58/100). 4 of 53 detection engines flagged it, exhibiting 1 ATT&CK technique.
Identification
- SHA-256:
f912051e4d8778012b863bfa1f1cc7f1c1b792cb39adf2c329fad87039c78a8a - SHA-1:
804079ddb9f3e22c564a6537a234c850fdc53283 - MD5:
031027e226c7551dbbcc6276fe1b2e2e - ssdeep:
768:Oj7EdHINuoWsjxdDu5sv3TKeo1875kneWaYI17dzJUmS4:OjsAn0d1SkeDndS4 - TLSH:
T13C307DFB1097CC0C7689CF4BADA6546EACC5978CB032AA8014D97B2CD47C9EDBB51421 - Submitted as: hack-to-find-youtubers-roblox_GM431946152.pdf
- File type: pdf · Size: 37697 bytes
- Verdict: suspicious (58/100)
Detections (4 of 53 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Microsoft Defender: Trojan:PDF/Phish.CFN!MTB
- Emsisoft (Emergency Kit): PDF.Spam.Heur.2
- Trellix Stinger (McAfee): PDF/Phish-TWM!031027E226C7
MITRE ATT&CK
Why this verdict
The suspicious score of 58/100 is the fusion of 4 weighted signals:
- Embedded link rated suspicious by URL analysis: https://privatearrangements.co.nz/public/files/oprewards-free-robux_GM431946152.pdf - network signal, weight 0.40, confidence 0.60
- Embedded network infrastructure: http://netcdn.co/app/431946152/hack-to-find-youtubers-roblox-game-hack, https://privatearrangements.co.nz/public/files/regal-world-coin-master_GM406889139.pdf, https://privatearrangements.co.nz/public/files/how-to-cheat-on-boxing-simulator-2-roblox_GM431946152.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- http://netcdn.co/app/431946152/hack-to-find-youtubers-roblox-game-hack
- https://privatearrangements.co.nz/public/files/regal-world-coin-master_GM406889139.pdf
- https://privatearrangements.co.nz/public/files/how-to-cheat-on-boxing-simulator-2-roblox_GM431946152.pdf
- https://privatearrangements.co.nz/public/files/oprewards-free-robux_GM431946152.pdf
- https://privatearrangements.co.nz/public/files/computer-roblox-hacking-apps_GM431946152.pdf
- https://privatearrangements.co.nz/public/files/how-to-get-stuff-that-cost-coins-free-mpe-master_GM406889139.pdf
- https://privatearrangements.co.nz/public/files/minecraft-windows-10-free-with-java_GM479516143.pdf
- https://privatearrangements.co.nz/public/files/roblox-free-robux-no-verification_GM431946152.pdf
- https://privatearrangements.co.nz/public/files/can-you-give-me-free-robux_GM431946152.pdf
- https://privatearrangements.co.nz/public/files/roblox-robux-money-cheat_GM431946152.pdf
- https://privatearrangements.co.nz/public/files/inject-hack-robux-com_GM431946152.pdf
- https://privatearrangements.co.nz/public/files/is-minecraft-bedrock-edition-free_GM479516143.pdf
- https://privatearrangements.co.nz/public/files/how-to-get-free-items-in-roblox-no-hack_GM431946152.pdf
- https://privatearrangements.co.nz/public/files/get-free-robux-2021_GM431946152.pdf
- https://privatearrangements.co.nz/public/files/inappropriate-roblox_GM431946152.pdf
- https://privatearrangements.co.nz/public/files/roblox-stylish-animation-pack-free_GM431946152.pdf
- https://privatearrangements.co.nz/public/files/how-do-i-get-minecraft-for-free_GM479516143.pdf
- https://privatearrangements.co.nz/public/files/robux-free-2021_GM431946152.pdf
- https://privatearrangements.co.nz/public/files/blox-world-free-robux_GM431946152.pdf
- https://privatearrangements.co.nz/public/files/coin-master-hack-ios_GM406889139.pdf
- https://privatearrangements.co.nz/public/files/hack-roblox-a-telecharger-gratuit_GM431946152.pdf
Embedded domains
- netcdn.co
- privatearrangements.co.nz
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report