SUSPICIOUS
42
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
This PDF document was flagged as suspicious by an ML classifier. The file presents a deceptive download button. Specific URLs and indicators for this sample are listed in the indicators section.
Machine Learning
- Nyx PDF Classifier malicious score 0.7795
Heuristics 3
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/hack-phantom-forces-roblox PDF link annotation
- http://santjoandelesabadesses.cat/images/how-to-make-hats-free-roblox.pdfIn PDF document text
- http://brusivojimi.com/images/hack-on-people-roblox-account.pdfIn PDF document text
- https://reggieslockandkey.com/images/free-robux-promo-codes-wiki.pdfIn PDF document text
- http://www.bernerpupping.at/images/roblox-mmc-zombies-project-hacks-script.pdfIn PDF document text
- http://galletta.com/images/roblox-hack-2021-download.pdfIn PDF document text
- http://www.hawler.in/images/how-can-you-hack-get-coins-in-roblox-knife-capsuls.pdfIn PDF document text
- http://vagency.us/images/how-to-get-free-quirks-in-boku-no-roblox.pdfIn PDF document text
- https://gestionpatrimonial.net/images/earn-robux-free-online.pdfIn PDF document text
- http://eventgo.fr/images/free-robux-on-roblox-2021.pdfIn PDF document text
- http://aeroclub-kaernten.at/images/roblox-promo-codes-free-robux.pdfIn PDF document text
- http://wattkit.com/images/boku-no-roblox-remastered-hack-money.pdfIn PDF document text
- https://invertsports.com/images/how-to-hack-cbro-roblox-money.pdfIn PDF document text
- http://loszavera.com/images/reborn-hack-roblox.pdfIn PDF document text
- http://lichtdrukkerijwijchen.nl/images/roblox-royale-high-halo-hack.pdfIn PDF document text
- http://gaec.cl/images/free-roblox-hack-accounts.pdfIn PDF document text
- https://www.najeebqasmi.com/images/how-free-free-robux.pdfIn PDF document text
- http://eddegrootassurantien.nl/images/roblox-cheats-how-to-get-unlimited-robux.pdfIn PDF document text
- http://www.sitiamministrabili.it/images/gross-roblox-hacks.pdfIn PDF document text
- https://bancroftandsons.com/images/free-preston-roblox-merch-catolog.pdfIn PDF document text
- https://gabrieliassociati.com/images/donating-free-robux-live.pdfIn PDF document text
- http://www.exikom.com.ua/images/roblox-admin-hack-mega.pdfIn PDF document text
- https://www.smartitbg.com/images/blueberry-hack-roblox.pdfIn PDF document text
- http://alexandrion.com/images/roblox-hack-money-apk.pdfIn PDF document text
- http://www.zdravazena.sk/images/how-to-get-free-robux-in-roblox-sub.pdfIn PDF document text
- http://baah.ca/images/free-multiplayer-games-like-roblox.pdfIn PDF document text
- https://www.iadh.bi/images/how-to-use-cheat-engine-roblox-jailbreak.pdfIn PDF document text
- http://musical-arts.de/images/roblox-jailbreak-hack-bypassed.pdfIn PDF document text
- https://lita-lb.org/images/roblox-tutorial-free-items.pdfIn PDF document text
- http://escolaarboc.cat/images/hacks-para-roblox-descargar-2021.pdfIn PDF document text
- http://www.kalaaliaraq.dk/images/roblox-free-lua-executor.pdfIn PDF document text
- http://interokna-kuban.ru/images/hacker-roblox-robux-tuto.pdfIn PDF document text
- http://scuttworksdesigns.us/images/how-to-hack-roblox-to-get-robux-2021.pdfIn PDF document text
- http://consultinggirona.es/images/roblox-how-to-make-a-shirt-for-free.pdfIn PDF document text
- http://businessfit.com/images/how-to-get-1-million-free-robux-breast-milk.pdfIn PDF document text
- http://www.exikom.com.ua/images/how-to-get-free-stuff-on-roblox-catalog-on-phone.pdfIn PDF document text
- http://global-tech-security.be/images/robux-gratuit-sans-hack-2021.pdfIn PDF document text
- http://nosocomium.rv.ua/images/get-free-roblox-now.pdfIn PDF document text
- http://babyxpress.de/images/giving-away-free-robux-cards-live.pdfIn PDF document text
- http://www.lycee-langevin-wallon.com/images/roblox-placerebuilder-cheat-engine-ban.pdfIn PDF document text
- https://www.kambati.co.za/images/is-bank-account-info-stored-in-roblox-if-account-hacked.pdfIn PDF document text
- https://imagineclimb.com/images/roblox-free-shirts-and-pants-for-girls.pdfIn PDF document text
- http://lanoblaie.fr/images/roblox-hacker-mask.pdfIn PDF document text
- http://vgsiemens.nl/images/roblox-how-to-get-free-clothes-ios.pdfIn PDF document text
- https://www.tsdb.com.au/images/free-obc-and-robux-pastebin.pdfIn PDF document text
- http://pia2000.net/images/how-to-hack-into-roblox-and-get-free-robux.pdfIn PDF document text
- https://www.milewood.co.uk/images/roblox-hack-ohne-handynummer-und-geld.pdfIn PDF document text
- http://hemmet-strand.dk/images/roblox-robort-free.pdfIn PDF document text
- https://www.sg-escholzmatt.ch/images/how-to-ban-someone-with-hacks-on-roblox.pdfIn PDF document text
- https://www.udivadlahotel.cz/images/fastbux-me-free-robux.pdfIn PDF document text
+14 more URL(s)
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_003_off00008381.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x8381 | 25340 bytes |
SHA-256: e7c3f587427b7f53d938f880d4cb491c2f6311dd85d2146baf233b2a9ffdf34c |
|||
font_01_sfnt_off0000bcaa.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xBCAA | 18756 bytes |
SHA-256: 7923309c08d0853a735bf00d1d7ec1f2649c107db9fe16d3f7bd671ade4fb1a0 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.