SUSPICIOUS
50
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
This PDF document was flagged as suspicious by an ML classifier. It uses an urgency-based lure. The file presents a deceptive download button. Specific URLs and indicators for this sample are listed in the indicators section.
Machine Learning
- Nyx PDF Classifier malicious score 0.6193
Heuristics 4
-
Urgency / deadline lure low SE_URGENCY_LUREDocument contains urgency or deadline language ('account will be terminated', 'action required within 24 hours', etc.) — useful context, but low-signal without other findings
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/how-to-hack-roblox-without-human-verification PDF link annotation
- http://iluvlocalplaces.com/images/will-roblox-be-free-on-ps4.pdfIn PDF document text
- https://bdsm-centrum.com/images/how-to-make-a-free-thumbnail-on-roblox.pdfIn PDF document text
- http://www.isril.it/images/fastbucks-free-robux.pdfIn PDF document text
- http://hemmet-strand.dk/images/best-admin-hack-for-roblox.pdfIn PDF document text
- http://properteez.com/images/robux-hack-2021-website.pdfIn PDF document text
- http://www.beantownlimo.com/images/how-to-hack-roblox-accounts-2021-on-ipad.pdfIn PDF document text
- http://www.marambio.com.ar/images/como-tener-robux-gratis-en-roblox-2021-sin-hack.pdfIn PDF document text
- http://malichy.pl/images/does-john-doe-hack-roblox.pdfIn PDF document text
- http://www.thecoffeebaron.co.za/images/free-codes-for-heavon-or-hell-roblox.pdfIn PDF document text
- http://linde-erbach.de/images/how-to-get-a-free-boombox-in-roblox.pdfIn PDF document text
- http://infoagronomia.com.ar/images/roblox-free-chemises-furious-jumpe.pdfIn PDF document text
- http://safeandsecurelocksmith.ca/images/best-free-stuff-roblox-2021.pdfIn PDF document text
- https://www.manisoft.ir/images/free-accounts-with-bigger-head-roblox.pdfIn PDF document text
- http://dottgagliardi.com/images/how-to-manage-server-roblox-script-hack.pdfIn PDF document text
- http://www.arredifunebri.com/images/free-sword-pack-roblox.pdfIn PDF document text
- http://alexandrion.com/images/easy-roblox-hacks-for-sword-art-online.pdfIn PDF document text
- http://schrichte.de/images/hacks-for-free-animations-roblox-proof.pdfIn PDF document text
- https://www.poiskavia.ru/images/hacks-for-money-for-sunset-city-on-roblox.pdfIn PDF document text
- https://zszolesno.pl/images/free-robux-codes-pc.pdfIn PDF document text
- https://socialvalue.gr/images/hack-coins-roblox-obby.pdfIn PDF document text
- http://androidthai.in.th/images/wewgaming-com-roblox-hack.pdfIn PDF document text
- http://www.hawler.in/images/how-to-speed-hack-in-roblox-kick-off.pdfIn PDF document text
- http://santeh-40.ru/images/queen-i-want-to-break-free-roblox-di.pdfIn PDF document text
- http://www.nielsen2u.dk/images/roblox-card-hack-pastebin.pdfIn PDF document text
- https://amatq.ca/images/free-player-points-roblox.pdfIn PDF document text
- https://technospektr.com.ua/images/shake-hack-roblox.pdfIn PDF document text
- http://techmobil.pl/images/2021-roblox-place-free-bricks-image.pdfIn PDF document text
- https://septik-montag.ru/images/free-robux-100-working-2021.pdfIn PDF document text
- https://www.stayon.no/images/roblox-hack-tampermonkey.pdfIn PDF document text
- https://www.porthos.it/images/robux-hack-apk-android.pdfIn PDF document text
- https://www.beaufortcollege.ie/images/how-to-get-free-robux-easy-no-download-2021.pdfIn PDF document text
- http://www.fluidtech.hu/images/free-dominus-roblox-script.pdfIn PDF document text
- http://www.duchidicastelluccio.it/images/free-roblox-card-pin.pdfIn PDF document text
- http://zarinnameh.ir/images/free-roblox-gams.pdfIn PDF document text
- http://brandyourbody.com/images/deadzone-hacks-roblox.pdfIn PDF document text
- http://gamixpaliwa.pl/images/how-to-hack-peoples-accounts-on-roblox-2021.pdfIn PDF document text
- https://www.beaufortcollege.ie/images/how-to-get-free-robux-subscriber-key.pdfIn PDF document text
- http://cekmekoygundem.com/images/how-to-hack-into-somebodys-roblox-account.pdfIn PDF document text
- https://www.les-sp.org/images/op-free-robux.pdfIn PDF document text
- http://lewishome.net/images/how-to-hack-in-ar-in-roblox.pdfIn PDF document text
- https://pemadamapi.net/images/roblox-hack-red-boy.pdfIn PDF document text
- https://www.ghknights.org/images/new-cheat-roblox.pdfIn PDF document text
- http://internetdeputy.com/images/free-roblox-toy-codes-2021-not-used.pdfIn PDF document text
- http://rwathia.com/images/roblox-salty-kid-thinks-im-hacking.pdfIn PDF document text
- http://www.sitiamministrabili.it/images/roblox-jailbreak-hack-client-we-are-devs.pdfIn PDF document text
- http://escolaarboc.cat/images/files-blue-roblox-hack-download.pdfIn PDF document text
- https://www.manisoft.ir/images/how-to-get-free-face-in-roblox.pdfIn PDF document text
- https://www.devries-group.de/images/hack-robux-ohne-cheat-engine.pdfIn PDF document text
- http://altc.de/images/30-free-robux.pdfIn PDF document text
+14 more URL(s)
Extracted artifacts 3
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
font_00_sfnt_off000081bd.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x81BD | 27432 bytes |
SHA-256: 47c068545eeb94a3dc18df4bb2b80a63057b98335c60a051624ded0c8419b67c |
|||
font_01_sfnt_off0000c0d2.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xC0D2 | 3936 bytes |
SHA-256: 9853ca89115022285623111534c9ddc4f1dd062ee785b99bc0edec496de21ae2 |
|||
font_02_sfnt_off0000cdbb.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xCDBB | 19164 bytes |
SHA-256: f02520336bbf097562af8ad9f10293111ff6317263843ef4c01777c0ed9f3b41 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.