SUSPICIOUS — how-you-get-free-robux_GM431946152.pdf
SUSPICIOUS — how-you-get-free-robux_GM431946152.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (44/100). 5 of 53 detection engines flagged it.
Identification
- SHA-256:
fc5c4e6ff3294945675bd450ebb525fcab5e7ee148c7a4ec93ed6c836be93d91 - SHA-1:
1c9e1b6218da8fdd01a3167967bcb6e002cc7ce7 - MD5:
a8d2516f4c8f5d426eaf419de664a0a8 - ssdeep:
768:ITt9UZsSsLQmiBcF1oeF0K/Rig23BEXPbCM1Z:wtJTQxveF1Jig2xEWM1Z - TLSH:
T1AE2F6DF74117CC5C7A8A8F47EAB6219D34CED74920B2CE428588326CD06DBFE6B514A1 - Submitted as: how-you-get-free-robux_GM431946152.pdf
- File type: pdf · Size: 35539 bytes
- Verdict: suspicious (44/100)
Detections (5 of 53 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Microsoft Defender: Trojan:PDF/Phish.CFN!MTB
- Emsisoft (Emergency Kit): PDF.Spam.Heur.2
- Trellix Stinger (McAfee): PDF/Phish-TWM!A8D2516F4C8F
- Kaspersky (KVRT): HEUR:Hoax.PDF.Phish.gen
Why this verdict
The suspicious score of 44/100 is the fusion of 3 weighted signals:
- Embedded network infrastructure: http://netcdn.tw/app/431946152/how-you-get-free-robux-game-hack, https://elearning.mtspersissindang.sch.id/__statics/gudangsoal/files/free-game-pack-coin-master_GM406889139.pdf, https://elearning.mtspersissindang.sch.id/__statics/gudangsoal/files/how-to-noclip-and-speed-hack-in-roblox-jailbreak_GM431946152.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- http://netcdn.tw/app/431946152/how-you-get-free-robux-game-hack
- https://elearning.mtspersissindang.sch.id/__statics/gudangsoal/files/free-game-pack-coin-master_GM406889139.pdf
- https://elearning.mtspersissindang.sch.id/__statics/gudangsoal/files/how-to-noclip-and-speed-hack-in-roblox-jailbreak_GM431946152.pdf
- https://elearning.mtspersissindang.sch.id/__statics/gudangsoal/files/serena-ryder-wild-and-free-id-roblox-code_GM431946152.pdf
- https://elearning.mtspersissindang.sch.id/__statics/gudangsoal/files/free-nike-shirt-roblox_GM431946152.pdf
- https://elearning.mtspersissindang.sch.id/__statics/gudangsoal/files/boombox-backpack-free-roblox_GM431946152.pdf
- https://elearning.mtspersissindang.sch.id/__statics/gudangsoal/files/coin-master-daily-free-spin-and-coin_GM406889139.pdf
- https://elearning.mtspersissindang.sch.id/__statics/gudangsoal/files/how-to-get-free-robux-app_GM431946152.pdf
- https://elearning.mtspersissindang.sch.id/__statics/gudangsoal/files/free-domain-for-minecraft-server_GM479516143.pdf
- https://elearning.mtspersissindang.sch.id/__statics/gudangsoal/files/how-to-get-minecraft-java-for-free_GM479516143.pdf
- https://elearning.mtspersissindang.sch.id/__statics/gudangsoal/files/how-to-hack-peoples-roblox-accounts_GM431946152.pdf
- https://elearning.mtspersissindang.sch.id/__statics/gudangsoal/files/robux-hack-no-verification_GM431946152.pdf
- https://elearning.mtspersissindang.sch.id/__statics/gudangsoal/files/was-minecraft-ever-free_GM479516143.pdf
- https://elearning.mtspersissindang.sch.id/__statics/gudangsoal/files/how-to-give-people-free-robux_GM431946152.pdf
- https://elearning.mtspersissindang.sch.id/__statics/gudangsoal/files/coin-master-hackcom-xyz_GM406889139.pdf
- https://elearning.mtspersissindang.sch.id/__statics/gudangsoal/files/how-to-get-free-robux-on-ipad-mini-2_GM431946152.pdf
- https://elearning.mtspersissindang.sch.id/__statics/gudangsoal/files/earn-free-robux_GM431946152.pdf
- https://elearning.mtspersissindang.sch.id/__statics/gudangsoal/files/cheat-roblox-shark-bite_GM431946152.pdf
- https://elearning.mtspersissindang.sch.id/__statics/gudangsoal/files/coin-master-hack-android-2021_GM406889139.pdf
- https://elearning.mtspersissindang.sch.id/__statics/gudangsoal/files/free-black-suit-roblox_GM431946152.pdf
- https://elearning.mtspersissindang.sch.id/__statics/gudangsoal/files/get-free-spins-on-coin-master_GM406889139.pdf
Embedded domains
- netcdn.tw
- elearning.mtspersissindang.sch.id
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report