SUSPICIOUS
42
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
This PDF document was flagged as suspicious by an ML classifier. The file presents a deceptive download button. Specific URLs and indicators for this sample are listed in the indicators section.
Machine Learning
- Nyx PDF Classifier malicious score 0.9434
Heuristics 3
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/sex-cheat-codes-roblox-sound-id PDF link annotation
- https://pa-waingapu.go.id/images/doanting-free-robux.pdfIn PDF document text
- http://escolaarboc.cat/images/how-to-draw-roblox-hacker.pdfIn PDF document text
- https://www.sitiwebjoomla.it/images/free-robux-hack-on-pc-2021.pdfIn PDF document text
- https://www.cpnf.ch/images/how-to-hack-a-roblox-account-2021.pdfIn PDF document text
- http://ff-obertraun.at/images/tutorial-avanzado-de-cheat-engine-para-dragon-ball-range-roblox.pdfIn PDF document text
- https://www.air-shop.cz/images/free-robux-generator-no-survey-or-human-verification-2021-pc.pdfIn PDF document text
- https://jdlgroup.ca/images/get-2021-free-robux-daily.pdfIn PDF document text
- http://www.eaapiaria.es/images/dress-up-on-roblox-that-are-no-roblox-just-free.pdfIn PDF document text
- https://www.albisser.ch/images/how-to-hack-roblox-no-human-verification.pdfIn PDF document text
- https://www.coriglianocalabro.it/images/dofa-no-roblux-robux-free.pdfIn PDF document text
- https://www.hbproducts.dk/images/hack-clients-for-roblox-youtube.pdfIn PDF document text
- https://www.lavigny.ch/images/roblox-pet-simulator-coin-hack.pdfIn PDF document text
- http://www.vktzunami.cz/images/how-to-get-the-advanceddisk-in-loomian-legacy-roblox-free.pdfIn PDF document text
- http://ns1.radiofacil.net/images/hacks-para-mad-city-roblox-rock-split.pdfIn PDF document text
- http://www.torvet11.dk/images/roblox-free-bc-hack.pdfIn PDF document text
- http://www.visiblefilm.com/images/free-roblox-items-2021.pdfIn PDF document text
- http://energotestcontrol.ru/images/pokemon-brick-bronze-hack-exploit-roblox.pdfIn PDF document text
- http://energotestcontrol.ru/images/roblox-hack-the-bank.pdfIn PDF document text
- https://www.cnte.org.br/images/how-do-get-the-right-roblox-account-pin-hack.pdfIn PDF document text
- https://www.romedia.gr/images/roblox-password-generator-free-download.pdfIn PDF document text
- https://esl.ipb.ac.id/images/hack-roblox-jailbreak-2021-new.pdfIn PDF document text
- http://www.agri-tech.com.au/images/download-free-robux-laptop.pdfIn PDF document text
- https://www.lomrad.go.th/images/roblox-hack-salto-otros-jugadores.pdfIn PDF document text
- http://bkd1.balikpapan.go.id/images/free-roblox-code-generator-no-human-verification.pdfIn PDF document text
- http://domaizdereva24.ru/images/i-got-999999999-robux-for-free-real.pdfIn PDF document text
- http://www.evaplast.by/images/roblox-free-play-no-download-online.pdfIn PDF document text
- http://www.lycee-langevin-wallon.com/images/how-to-hack-roblox-account-february.pdfIn PDF document text
- http://hemmet-strand.dk/images/pastebin-free-robux-hack-no-wait.pdfIn PDF document text
- https://www.saisystem.it/images/how-to-earn-robux-for-free-in-roblox.pdfIn PDF document text
- https://www.hotschool.com.au/images/free-robux-no-verification-or-offer.pdfIn PDF document text
- http://www.gadanie.lv/images/lumber-tycoon-2-glitch-to-get-free-robux-robuxian.pdfIn PDF document text
- http://www.sanjosedeminas.gob.ec/images/free-robux-2021-roblox.pdfIn PDF document text
- http://www.eaapiaria.es/images/free-roblox-accounts-forums.pdfIn PDF document text
- https://www.sinaloadiario.mx/images/how-to-hack-roblox-wild-savannah-inf-health-hack.pdfIn PDF document text
- https://www.dierenartsberghman.be/images/how-to-get-free-robux-on-laptop-2021.pdfIn PDF document text
- http://www.evaplast.by/images/new-roblox-swordburst-2-hack.pdfIn PDF document text
- http://portal.crfsp.org.br/images/how-to-get-a-free-roblox-necklace.pdfIn PDF document text
- http://www.sapaengineering.kz/images/wall-hacks-and-aimbot-roblox.pdfIn PDF document text
- https://www.utalii.ac.ke/images/free-robux-nopde-enjin.pdfIn PDF document text
- http://ff-obertraun.at/images/how-to-get-free-robux-2021-january.pdfIn PDF document text
- https://kimolos-link.gr/images/roblox-hack-forum.pdfIn PDF document text
- http://www.sapaengineering.kz/images/hack-account-roblox-with-link.pdfIn PDF document text
- http://www.fluidtech.hu/images/cheat-roblox-abeille.pdfIn PDF document text
- https://technospektr.com.ua/images/beyond-hack-script-roblox.pdfIn PDF document text
- http://salantiskis.lt/images/roblox-hack-blox-piece.pdfIn PDF document text
- https://accord.kiev.ua/images/descargar-hack-robux.pdfIn PDF document text
- http://svp-steinmaur.ch/images/free-games-about-roblox.pdfIn PDF document text
- http://aeroclub-kaernten.at/images/roblox-exploit-dll-scripts-cheat-engine-pastebin.pdfIn PDF document text
- http://www.torvet11.dk/images/robux-roblox-free-robux.pdfIn PDF document text
+2 more URL(s)
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
font_00_sfnt_off0000570a.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x570A | 22868 bytes |
SHA-256: a9a910a2ed39dcfb5fadc6e0884e87631f3ec4db4e5357e178842d209489797a |
|||
font_01_sfnt_off00008a7f.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x8A7F | 18024 bytes |
SHA-256: cbaea743b34b589de08933103a7c2fe09c83dea33f89fa8b0f342b5a54c7c668 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.