SUSPICIOUS
42
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
This PDF document was flagged as suspicious by an ML classifier. The file presents a deceptive download button. Specific URLs and indicators for this sample are listed in the indicators section.
Machine Learning
- Nyx PDF Classifier malicious score 0.6193
Heuristics 3
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/how-to-use-cheat-engine-in-roblox PDF link annotation
- https://europainstitut.hu/images/roblox-prison-life-hack-mac.pdfIn PDF document text
- https://www.gvandenakker.nl/images/leah-ashe-roblox-royale-high-how-to-get-free-things.pdfIn PDF document text
- https://www.wildpark-johannismuehle.de/images/free-roblox-gift-cards-2021-unused.pdfIn PDF document text
- http://behsanroshd.com/images/how-to-hack-roblox-accounts-2021-august.pdfIn PDF document text
- http://www.sanjosedeminas.gob.ec/images/free-robux-card-codes-live.pdfIn PDF document text
- https://amatq.ca/images/hack-de-roblox-para-volar.pdfIn PDF document text
- http://interpretation-dessins-enfants.net/images/roblox-hacks-bubble-gum.pdfIn PDF document text
- http://bodyguardsecurityservices.com.au/images/free-roblox-gfx-artists.pdfIn PDF document text
- https://eleganceautospa.ca/images/roblox-free-account-giveaway-2021.pdfIn PDF document text
- http://www.gadanie.lv/images/free-roblox-card-generator-need-to-do-nothing.pdfIn PDF document text
- http://www.sapaengineering.kz/images/hacks-fr-roblox-phantom-forces.pdfIn PDF document text
- http://wireprod.net/images/roblox-all-games-hack.pdfIn PDF document text
- http://gingerscience.co.in/images/codes-for-free-robux-2021-that-no-one-use.pdfIn PDF document text
- http://mycounty.com.ua/images/youtube-roblox-pokemon-brick-bronze-free-money-hack.pdfIn PDF document text
- http://www.pro-futuro.eu/images/best-hacking-apps-for-roblox.pdfIn PDF document text
- https://www.foodsafety.cz/images/roblox-how-to-get-free-robux-no-hacks-2021.pdfIn PDF document text
- http://eddegrootassurantien.nl/images/how-to-hack-roblox-accounts-pc.pdfIn PDF document text
- http://reisebild.eu/images/hack-para-roblox-2021-jailbreak.pdfIn PDF document text
- https://estalagemmonteverde.com.br/images/free-robux-games-that-work-2021.pdfIn PDF document text
- http://www.pro-futuro.eu/images/free-avatar-roblox-2021.pdfIn PDF document text
- http://seytarehco.com/images/roblox-sex-hack-cheat-engine.pdfIn PDF document text
- http://joshherman.com/images/roblox-jailbreak-noclip-hack-no-download.pdfIn PDF document text
- https://www.tsdb.com.au/images/who-did-i-get-free-robux.pdfIn PDF document text
- https://www.eglihotel.gr/images/robux-hack-2021-august.pdfIn PDF document text
- http://steklofara.com.ua/images/programa-para-hacks-en-roblox.pdfIn PDF document text
- http://www.eurosan1.ba/images/roblox-cheat-engine-retail-tycoon-2021.pdfIn PDF document text
- http://www.pleiadisrl.it/images/ninsene-diamon-roblox-hack-key.pdfIn PDF document text
- http://zarinnameh.ir/images/roblox-free-robux-no-fike.pdfIn PDF document text
- http://gops.pruszczgdanski.pl/images/how-to-get-more-robux-using-cheat-engine.pdfIn PDF document text
- http://gremihostaleria.cat/images/free-roblox-jailbreak-exploits.pdfIn PDF document text
- http://scuttworksdesigns.us/images/how-to-cheat-the-idle-roblox-system.pdfIn PDF document text
- https://inscastellar.cat/images/hacker-roblox-wls2.pdfIn PDF document text
- https://www.audipec.com.br/images/free-robux-by-bananaman.pdfIn PDF document text
- https://www.air-shop.cz/images/the-most-hacked-game-in-roblox.pdfIn PDF document text
- https://www.beaufortcollege.ie/images/roblox-redvalk-free-code.pdfIn PDF document text
- http://kim-kinder-im-mittelpunkt.de/images/how-to-hack-on-roblox-saber-wars-alpha.pdfIn PDF document text
- https://consorziocsa-asicaivano.it/images/free-robux-ohne-veriefizierung.pdfIn PDF document text
- https://www.saisystem.it/images/cerberus-hack-roblox.pdfIn PDF document text
- http://bunadsmaria.com/images/download-hack-roblox-lumber-tycoon-2.pdfIn PDF document text
- http://elllanorestaurants.com/images/skimas-roblox-hack.pdfIn PDF document text
- http://www.centromedicoaurora.it/images/speed-hack-roblox-code.pdfIn PDF document text
- http://echosvoix.ch/images/groups-with-free-robux.pdfIn PDF document text
- http://abqwinair.com/images/free-bux-roblox.pdfIn PDF document text
- http://vibrato.fr/images/how-to-get-free-roblox-without-downloading-anything.pdfIn PDF document text
- http://rafaelmontesinos.com/images/program-hack-roblox.pdfIn PDF document text
- https://lesegais.ru/images/roblox-pokemon-brick-bronze-hack-legendary.pdfIn PDF document text
- http://mydevice.com.au/images/roblox-aimbot-download-free.pdfIn PDF document text
- https://www.wildpark-johannismuehle.de/images/robux-free-2021.pdfIn PDF document text
- http://www.lovecraftiana.com.ar/images/roblox-for-free-without-signing-in.pdfIn PDF document text
+17 more URL(s)
Extracted artifacts 3
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_003_off000083e4.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x83E4 | 26712 bytes |
SHA-256: a968aa15ddc13fde2a723e2767538fded814cf2f930562b64343bf0ea4926967 |
|||
font_01_sfnt_off0000c184.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xC184 | 2844 bytes |
SHA-256: baad2f3f6808f4af03fa9398e38c580c8d846f7f773a947d8cc1f39b2753d31a |
|||
font_02_sfnt_off0000cb45.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xCB45 | 18468 bytes |
SHA-256: 359e2f0d8cb40fe6e2e4d525e8aeed613ae5a8ba992f60ba86b010e03dda6860 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.