MALICIOUS
100
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
T1204.002 Malicious Link
The PDF contains embedded links that redirect to external sites, identified as malicious redirectors. The document body, though heavily obfuscated, suggests a lure for downloading software like 'minecraft-1.16-apk-download-game-hack'. The presence of a visual download button heuristic further supports the malicious intent of tricking users into downloading potentially harmful files.
Machine Learning
- Nyx PDF Classifier malicious score 0.9969
Heuristics 3
-
PDF links to known malicious redirector infrastructure critical PDF_MALICIOUS_REDIRECTOR_LINKPDF contains a clickable URI to redirector infrastructure used by a known malicious PDF SEO/adware delivery campaign. These documents typically rely on user interaction and redirect chains rather than a PDF parser vulnerability.
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL https://netcdn.xyz/app/479516143/minecraft-1.16-apk-download-game-hack In PDF document text
- http://danielkleiboemer.de/images/coin-master-hack-apk-july-29_GM406889139.pdfIn PDF document text
- http://danielkleiboemer.de/images/free-robux-no-email_GM431946152.pdfIn PDF document text
- http://danielkleiboemer.de/images/roblox-free-robux_GM431946152.pdfIn PDF document text
- http://danielkleiboemer.de/images/free-spin-link-for-coin-master-game_GM406889139.pdfIn PDF document text
- http://danielkleiboemer.de/images/free-limiteds-roblox_GM431946152.pdfIn PDF document text
- http://danielkleiboemer.de/images/coin-master-hack-fast-org_GM406889139.pdfIn PDF document text
- http://danielkleiboemer.de/images/coin-master-daily-gift-free-spins-and-coins-link_GM406889139.pdfIn PDF document text
- http://danielkleiboemer.de/images/hacks-for-roblox-jailbreak_GM431946152.pdfIn PDF document text
- http://danielkleiboemer.de/images/free-coin-master-coins-and-spins_GM406889139.pdfIn PDF document text
- http://danielkleiboemer.de/images/minecraft-apk-114_GM479516143.pdfIn PDF document text
- http://danielkleiboemer.de/images/what-games-on-roblox-give-you-free-robux_GM431946152.pdfIn PDF document text
- http://danielkleiboemer.de/images/minecraft-free-minecraft_GM479516143.pdfIn PDF document text
- http://danielkleiboemer.de/images/coin-master-time-hack_GM406889139.pdfIn PDF document text
- http://danielkleiboemer.de/images/games-in-roblox-that-give-you-robux_GM431946152.pdfIn PDF document text
- http://danielkleiboemer.de/images/coin-master-daily-free-spins-2021_GM406889139.pdfIn PDF document text
- http://danielkleiboemer.de/images/daily-spins-coin-master_GM406889139.pdfIn PDF document text
- http://danielkleiboemer.de/images/free-robux-groups-2021_GM431946152.pdfIn PDF document text
- http://danielkleiboemer.de/images/earn-free-robux-for-roblox_GM431946152.pdfIn PDF document text
- http://danielkleiboemer.de/images/coin-master-free-coins-and-spins-blogspot_GM406889139.pdfIn PDF document text
- http://danielkleiboemer.de/images/roblox-e-free_GM431946152.pdfIn PDF document text
- http://en.wikipedia.org/wiki/MIT_LicenseIn PDF document text
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_003_off00004bd0.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x4BD0 | 25176 bytes |
SHA-256: c9ad4d286728d492804d7dc3352d38e69c4f71d1b3e20b30caace60d942ee02e |
|||
font_01_sfnt_off000084cf.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x84CF | 18976 bytes |
SHA-256: 66d37f1f8a6aa07be6e2b5788d3f6b7c3f727c7395e5f0cbde4181c4dd6d3b3c |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.