SUSPICIOUS
42
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
This PDF document was flagged as suspicious by an ML classifier. The file presents a deceptive download button. Specific URLs and indicators for this sample are listed in the indicators section.
Machine Learning
- Nyx PDF Classifier malicious score 0.6193
Heuristics 3
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/roblox-free-downlow PDF link annotation
- http://www.mikramarine.gr/images/free-roblox-lua-executor.pdfIn PDF document text
- http://ilcommercialista.info/images/how-to-get-free-cute-clothes-on-roblox.pdfIn PDF document text
- http://fmbompastor.com.br/images/roblox-multi-hack-2021.pdfIn PDF document text
- https://raduzhnyj.od.ua/images/free-robux-with-no-tests.pdfIn PDF document text
- http://zarinnameh.ir/images/free-robux-no-human-verification-hack.pdfIn PDF document text
- http://www.pbconsulting.it/images/how-to-get-free-muscles-in-roblox.pdfIn PDF document text
- http://axia-verlag.at/images/roblox-how-to-get-free-stylish-animation.pdfIn PDF document text
- https://www.gymun.cz/images/roblox-suit-free.pdfIn PDF document text
- http://mostowicz.pl/images/hack-roblox-tower-battle.pdfIn PDF document text
- https://estalagemmonteverde.com.br/images/sonic-boom-shirt-in-roblox-free.pdfIn PDF document text
- https://corbo.ru/images/adopt-me-pets-roblox-how-to-get-free-bucks.pdfIn PDF document text
- http://www.kalaaliaraq.dk/images/game-cheat-central-how-to-get-free-robux.pdfIn PDF document text
- http://www.remiauclair.fr/images/free-robux-computer-only.pdfIn PDF document text
- http://alexandrion.com/images/roblox-free-robux-and-tix-hack.pdfIn PDF document text
- https://gaj.rs/images/cheat-engine-63-roblox-apocalypse-rising.pdfIn PDF document text
- http://moralcenter.or.th/images/how-to-hack-roblox-easy-2021.pdfIn PDF document text
- https://www.ncscolour.no/images/how-to-wear-free-models-in-roblox.pdfIn PDF document text
- http://kids-academy.pl/images/roblox-no-clip-hacks-every-game.pdfIn PDF document text
- http://poltekkeskhjogja.ac.id/images/descargar-roblox-hack-robux-para-android.pdfIn PDF document text
- https://www.udivadlahotel.cz/images/mega-roblox-cheat.pdfIn PDF document text
- https://www.air-shop.cz/images/best-free-robux-websites-with-no-surveys.pdfIn PDF document text
- http://sandra-masemann.de/images/roblox-apocalypse-rising-how-to-spawn-items-without-cheat-engine.pdfIn PDF document text
- http://lichtdrukkerijwijchen.nl/images/hackear-roblox-para-android.pdfIn PDF document text
- http://www.kalaaliaraq.dk/images/free-hair-roblox-boy.pdfIn PDF document text
- https://www.albisser.ch/images/free-roblox-account-generator-2021.pdfIn PDF document text
- https://www.najeebqasmi.com/images/conta-roblox-hack.pdfIn PDF document text
- http://www.fluidtech.hu/images/how-to-get-free-robux-roblox-generator.pdfIn PDF document text
- https://www.dachytarasowe.eu/images/free-robux-hack-fast-and-easy.pdfIn PDF document text
- http://piadaandco.it/images/free-roblox-accounts-not-used.pdfIn PDF document text
- http://soma.com.ua/images/how-to-get-free-roblox-gift-card-codes-2021.pdfIn PDF document text
- https://www.cpnf.ch/images/roblox-lumber-tycoon-2-money-hack-2021.pdfIn PDF document text
- https://www.prodex-holz.cz/images/free-clothing-on-roblox-names-for-girls.pdfIn PDF document text
- https://enpav.it/images/fashion-frenzy-games-free-online-roblox.pdfIn PDF document text
- https://www.lomrad.go.th/images/descargar-hack-roblox-funcional.pdfIn PDF document text
- http://eooe.gr/images/roblox-cheats-computer.pdfIn PDF document text
- http://www.cosver.nl/images/roblox-hack-ninja-assassin.pdfIn PDF document text
- http://behsanroshd.com/images/roblox-btools-cheat-tables.pdfIn PDF document text
- http://www.eurologistiki.gr/images/roblox-tuto-hack.pdfIn PDF document text
- http://goldwing-shop.ru/images/commande-lua-roblox-cheat.pdfIn PDF document text
- https://arcasict.nl/images/how-to-you-hack-on-roblox-assassin.pdfIn PDF document text
- https://www.cfdcnv.com/images/can-your-roblox-account-get-hacked.pdfIn PDF document text
- http://codicicolori.com/images/how-to-hack-roblox-paintball-rank.pdfIn PDF document text
- http://the-specials.ch/images/is-there-any-way-to-actually-get-free-robux.pdfIn PDF document text
- http://www.nielsen2u.dk/images/robux-gift-card-codes-free.pdfIn PDF document text
- https://www.mvp.co.nz/images/roblox-hacks-and-cheats-no-survey.pdfIn PDF document text
- http://www.bripi.pl/images/free-robux-team.pdfIn PDF document text
- http://jdlwealth.com/images/do-you-get-free-robux-builders-club-on-the-weekend.pdfIn PDF document text
- http://cleanteclogistics.com/images/dayz-2-roblox-hack.pdfIn PDF document text
- http://www.peterdejonge.nl/images/mad-city-roblox-hack-script-pastebin.pdfIn PDF document text
+13 more URL(s)
Extracted artifacts 3
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_003_off0000830f.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x830F | 25096 bytes |
SHA-256: 72b1a6953f3a5102253cba5ccedf49cb48c1c075d445f2b2bfb7d0ec5bfe2710 |
|||
font_01_sfnt_off0000bd35.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xBD35 | 2848 bytes |
SHA-256: 4737c2778a085e0cb49e73f3b054b1a71e3f40720d213b4bfda97f95a31bfbf1 |
|||
font_02_sfnt_off0000c6f6.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xC6F6 | 17672 bytes |
SHA-256: d91430067ffb52a3f3449fd2b405399645f4c88a96f48eefb0156349ac51600d |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.