SUSPICIOUS
42
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
T1059.007 JavaScript
This PDF document was flagged as suspicious by an ML classifier. The file presents a deceptive download button. Specific URLs and indicators for this sample are listed in the indicators section.
Machine Learning
- Nyx PDF Classifier malicious score 0.6397
Heuristics 3
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/how-to-get-free-robux-subscribe PDF link annotation
- http://prodent.com.ua/images/roblox-shirt-template-transparent-free-shipping.pdfIn PDF document text
- https://liceucastrodelapenya.com/images/free-roblox-rust-2021.pdfIn PDF document text
- http://sdservicesrl.it/images/inquisitormaster-how-to-get-free-robux.pdfIn PDF document text
- http://imp.lg.ua/images/how-to-change-the-script-on-roblox-2021-free-robux.pdfIn PDF document text
- https://www.osoc.com/images/roblox-counter-blox-wall-hack.pdfIn PDF document text
- http://behsanroshd.com/images/how-to-get-2021-robux-on-roblox-free-2021.pdfIn PDF document text
- https://www.elevage-chiot.fr/images/mega-cheat-roblox.pdfIn PDF document text
- https://kierowcyhgv.uk/images/roblox-no-download-free-play.pdfIn PDF document text
- http://naturschutzgossau-zh.ch/images/click-kill-hack-roblox.pdfIn PDF document text
- https://www.lomrad.go.th/images/how-to-fly-hack-in-roblox-phantom-forces.pdfIn PDF document text
- http://alexanderautos.co/images/how-to-give-yourself-free-robux.pdfIn PDF document text
- https://www.utalii.ac.ke/images/hack-para-robux-en-roblox.pdfIn PDF document text
- http://altc.de/images/legend-of-dragons-rpg-free-admin-roblox.pdfIn PDF document text
- https://stroyzakazremont.ru/images/free-robux-hack-no-human-verification-at-all.pdfIn PDF document text
- http://www.campiresine.it/images/free-refunds-for-roblox-site.pdfIn PDF document text
- http://evro-okna.net/images/roblox-free-clothes-2021.pdfIn PDF document text
- http://www.vktzunami.cz/images/apocalypse-rising-roblox-hack.pdfIn PDF document text
- http://pa-tanjungselor.go.id/images/cheat-roblox-booga-booga-2021.pdfIn PDF document text
- https://kimolos-link.gr/images/filtered-key-roblox-hack.pdfIn PDF document text
- https://www.wadowice24.pl/images/xex-roblox-cheat.pdfIn PDF document text
- http://www.drent.se/images/prisonbreak16-hack-script-roblox.pdfIn PDF document text
- http://www.bripi.pl/images/hack-viexploid-madcity-roblox.pdfIn PDF document text
- http://wokbaarlo.nl/images/how-to-sell-a-clothes-roblox-free.pdfIn PDF document text
- http://www.arredifunebri.com/images/download-roblox-for-free-seash.pdfIn PDF document text
- http://pa-tanjungselor.go.id/images/freecodepro-how-to-get-free-roblox.pdfIn PDF document text
- https://www.air-shop.cz/images/roblox-javascript-hack.pdfIn PDF document text
- https://cdu-lengerich.de/images/pointsprizes-com-earn-free-robux-legally.pdfIn PDF document text
- https://verdensbarn.no/images/free-robux-now-get-it.pdfIn PDF document text
- http://prohsa.com/images/free-items-on-roblox-2021.pdfIn PDF document text
- https://pagadder.com/images/run-free-roblox.pdfIn PDF document text
- http://dos.most.gov.la/images/roblox-free-robux-generator-apphack-online.pdfIn PDF document text
- http://www.pcclawyers.com.au/images/jailbreak-roblox-code-speed-hack.pdfIn PDF document text
- http://kids-academy.pl/images/free-roblox-accounts-2021-with-robux.pdfIn PDF document text
- http://dottgagliardi.com/images/adfly-roblox-hack.pdfIn PDF document text
- http://bufbd.org/images/i-was-hack-on-roblox-no-download.pdfIn PDF document text
- http://icomsolutions.com.au/images/how-to-hack-roblox-to-get-free-robux-on-pc.pdfIn PDF document text
- http://riccardodurso.it/images/shotgun-willy-cheat-codes-roblox-id.pdfIn PDF document text
- http://finettifrs.it/images/is-roblox-for-free.pdfIn PDF document text
- http://reggieslockandkey.com/images/daniel-newhard-roblox-hack.pdfIn PDF document text
- https://www.prodex-holz.cz/images/hack-roblox-jailbreack.pdfIn PDF document text
- http://bibliotheque-perrigny-les-dijon.fr/images/roblox-unltimate-driving-cheats.pdfIn PDF document text
- http://solidkom.ch/images/aimbow-hack-fr-roblox-strucid.pdfIn PDF document text
- https://www.alu-as.cz/images/roblox-jailbreack-hacks.pdfIn PDF document text
- https://www.appartamenticroazia24.com/images/como-hackear-vehicle-simulator-roblox-para-tener-12000000-2021.pdfIn PDF document text
- http://kancelaria-legnica.eu/images/www-roblox-hack-top.pdfIn PDF document text
- https://beejekorf.nl/images/free-roblox-coding.pdfIn PDF document text
- http://wireprod.net/images/22-500-free-robux.pdfIn PDF document text
- http://bufbd.org/images/pastebin-free-robux-10.pdfIn PDF document text
- http://britishcomics.com/images/roblox-cheat-robux-free.pdfIn PDF document text
+12 more URL(s)
Extracted artifacts 3
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_003_off0000814e.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x814E | 24508 bytes |
SHA-256: 8478a4c0203dfd5ce2f952309cc4b70763bcfe480c6bb724812aba0af58eb420 |
|||
font_01_sfnt_off0000b904.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xB904 | 3312 bytes |
SHA-256: 40bd8eebcb3a0d68a8646f1930e84f30a44bfa48525263c6c528f0bc1e9c1677 |
|||
font_02_sfnt_off0000c453.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xC453 | 17964 bytes |
SHA-256: 87c4c83553cfe461916484f8836763c356b21a35cd1dc68784ab98215fc1ae6e |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.