SUSPICIOUS
42
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
This PDF document was flagged as suspicious by an ML classifier. The file presents a deceptive download button. Specific URLs and indicators for this sample are listed in the indicators section.
Machine Learning
- Nyx PDF Classifier malicious score 0.9434
Heuristics 3
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/download-roblox-for-free-on-mac PDF link annotation
- http://hemmet-strand.dk/images/jack-hack-robuxcom.pdfIn PDF document text
- https://www.cnte.org.br/images/free-2021-roblox-accounts.pdfIn PDF document text
- http://domaizdereva24.ru/images/roblox-ro-piece-hacks.pdfIn PDF document text
- http://bkd1.balikpapan.go.id/images/john-roblox-free.pdfIn PDF document text
- http://www.torvet11.dk/images/como-hackear-roblox-adopt-me.pdfIn PDF document text
- http://pa-tanjungselor.go.id/images/awesome-roblox-outfits-for-free.pdfIn PDF document text
- https://www.cpnf.ch/images/how-to-hack-a-roblox-account-2021.pdfIn PDF document text
- https://www.saisystem.it/images/2021-roblox-hacks-mac.pdfIn PDF document text
- https://www.cpnf.ch/images/free-non-model-roblox.pdfIn PDF document text
- http://www.actae.gr/images/how-to-get-free-robux-and-tickets.pdfIn PDF document text
- http://www.gadanie.lv/images/roblox-jailbreak-hack-youtube.pdfIn PDF document text
- http://www.exikom.com.ua/images/how-to-get-free-robux-on-a-laptop-2021.pdfIn PDF document text
- http://www.anies.eu/images/how-to-get-free-robux-no-joke-2021.pdfIn PDF document text
- https://jdlgroup.ca/images/how-to-teleport-yourself-in-roblox-hack.pdfIn PDF document text
- https://www.milewood.co.uk/images/best-roblox-scripts-to-hack-games-feree.pdfIn PDF document text
- http://www.vktzunami.cz/images/roblox-gift-card-free-no-human-very.pdfIn PDF document text
- https://www.stkdb.cz/images/isuku-roblox-free-shop-t-schirt.pdfIn PDF document text
- https://www.tsdb.com.au/images/demon-hack-roblox.pdfIn PDF document text
- http://www.boic.nl/images/hydra-roblox-free-robux.pdfIn PDF document text
- https://www.elevage-chiot.fr/images/roblox-free-online-building-game.pdfIn PDF document text
- http://svp-steinmaur.ch/images/hitbox-resizer-hack-roblox.pdfIn PDF document text
- http://gops.pruszczgdanski.pl/images/roblox-pokemon-brick-bronze-hack-script.pdfIn PDF document text
- http://www.malonmalon.com.ar/images/how-to-get-free-robux-hack-on-pc.pdfIn PDF document text
- http://bkd1.balikpapan.go.id/images/robux-hack-no-human-verification-needed.pdfIn PDF document text
- https://technospektr.com.ua/images/how-to-get-free-robux-really-works-2021.pdfIn PDF document text
- https://consorziocsa-asicaivano.it/images/how-to-have-script-for-hack-on-roblox.pdfIn PDF document text
- http://www.htc.edu.au/images/hhttp-free-robuxwin.pdfIn PDF document text
- https://www.albisser.ch/images/how-to-get-back-into-a-hacked-roblox-account.pdfIn PDF document text
- http://www.lycee-langevin-wallon.com/images/free-roblox-cards-no-survey-no-download.pdfIn PDF document text
- http://www.mikramarine.gr/images/roblox-rc7-free-account.pdfIn PDF document text
- https://ballaratcaravans.com.au/images/free-robux-no-survey-2021-no-verification.pdfIn PDF document text
- https://www.tsdb.com.au/images/roblox-gfx-render-free-to-use.pdfIn PDF document text
- http://www.marambio.com.ar/images/roblox-assassin-knife-hack.pdfIn PDF document text
- https://www.seeingindependence.org/images/how-to-create-a-free-admin-game-in-roblox.pdfIn PDF document text
- http://www.eaapiaria.es/images/roblox-hack-atravesar-paredes-actualizado-2021-funcionando.pdfIn PDF document text
- https://ballaratcaravans.com.au/images/free-robux-download-app-verification.pdfIn PDF document text
- http://www.zdravazena.sk/images/roblox-games-that-allow-free-cam.pdfIn PDF document text
- http://www.mjclautrec.fr/images/miss-play-com-free-robux.pdfIn PDF document text
- https://www.eglihotel.gr/images/v3rmillion-hacks-roblox-treasure-quest.pdfIn PDF document text
- http://www.lionel-seppoloni.fr/images/roblox-hack-download-xbox-one.pdfIn PDF document text
- http://www.awakeningtruth.org/images/get-your-free-tvs-roblox.pdfIn PDF document text
- http://uptodate.az/images/how-to-get-free-robux-on-a-ipad-2021.pdfIn PDF document text
- https://esl.ipb.ac.id/images/free-500-robux-quiz.pdfIn PDF document text
- https://eddar.fr/images/0-0-roblox-hacker.pdfIn PDF document text
- http://www.eaapiaria.es/images/hacks-para-roblox-como-traspasar-paredes.pdfIn PDF document text
- https://www.tsdb.com.au/images/roblox-hacking-peobel.pdfIn PDF document text
- http://www.zdravazena.sk/images/free-robux-no-pass-requiredfor-pc.pdfIn PDF document text
- http://www.pcclawyers.com.au/images/20-roblox-card-free.pdfIn PDF document text
- http://www.pcclawyers.com.au/images/hacked-roblox-song-id.pdfIn PDF document text
+2 more URL(s)
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
font_00_sfnt_off00005802.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x5802 | 22520 bytes |
SHA-256: 0657266d4a5fefc6064930a7650a099bb0775c79b2280b947592ac0d724e15f1 |
|||
font_01_sfnt_off00008a77.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x8A77 | 18412 bytes |
SHA-256: 5e038a2d891f4a14c4e01dde0cb4c230b8cd330434795a95d3e842461b3fdd62 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.