SUSPICIOUS
42
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
This PDF document was flagged as suspicious by an ML classifier. The file presents a deceptive download button. Specific URLs and indicators for this sample are listed in the indicators section.
Machine Learning
- Nyx PDF Classifier malicious score 0.7795
Heuristics 3
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/roblox-speed-hack-for-all-games-script-pastebin PDF link annotation
- http://musestravel.com/images/roblox-galaxy-money-hack.pdfIn PDF document text
- http://www.elis-strechy.cz/images/how-to-hack-roblox-btools.pdfIn PDF document text
- https://gafaseo.com/images/bexgg-free-robux.pdfIn PDF document text
- https://www.ferienhausdirektkroatien.de/images/roblox-hack-scripts-level-7.pdfIn PDF document text
- http://www.mosaikshop.at/images/for-roblox-launch-for-free-vip.pdfIn PDF document text
- http://loriginedupain.org/images/hack-roblox-dll.pdfIn PDF document text
- https://roberto-gac.com/images/inject-hack-com-roblox.pdfIn PDF document text
- http://www.exikom.com.ua/images/kuso-ico-roblox-hack.pdfIn PDF document text
- http://traveltrucks.com.au/images/how-to-get-free-robux-inspect-element.pdfIn PDF document text
- http://ozonizarint.com/images/free-roblox-promo-codes-2021-may.pdfIn PDF document text
- https://technospektr.com.ua/images/roblox-hacks-xray-2021.pdfIn PDF document text
- http://imp.lg.ua/images/utiliser-des-cheat-roblox.pdfIn PDF document text
- http://instrutech.co.th/images/roblox-final-stand-2-cheat.pdfIn PDF document text
- http://szekelymozes.ro/images/free-robux-meme.pdfIn PDF document text
- https://scraperite.com/images/roblox-highschool-money-cheat.pdfIn PDF document text
- http://ilccanada.org/images/roblox-phantom-forces-hack-june-2021.pdfIn PDF document text
- http://canadatowers.com/images/how-to-get-free-audio-in-roblox-2021.pdfIn PDF document text
- http://southernhills-golf.com/images/hacks-para-roblox-jailbreak-dinero.pdfIn PDF document text
- http://consultinggirona.es/images/free-roblox-accounts-2021-march.pdfIn PDF document text
- http://hotel-buta.by/images/how-do-you-hack-on-roblox-prison-life.pdfIn PDF document text
- http://www.brtes.com/images/roblox-robux-hack-download-pc.pdfIn PDF document text
- http://www.torvet11.dk/images/how-to-get-free-robux-hard.pdfIn PDF document text
- http://ctr74.net/images/dansploit-roblox-hack-download.pdfIn PDF document text
- https://cdu-lengerich.de/images/haw-to-get-robux-in-hack.pdfIn PDF document text
- http://salantiskis.lt/images/jailbreak-way-to-get-free-robux.pdfIn PDF document text
- https://www.seeingindependence.org/images/roblox-cheat-exploit-juillet-2021-for-vehicule-simulator.pdfIn PDF document text
- http://abqwinair.com/images/roblox-hack-mobile-generator.pdfIn PDF document text
- https://www.cfdcnv.com/images/how-to-get-free-comends-on-roblox-innovation.pdfIn PDF document text
- http://demenagementlandry.com/images/roblox-free-adiidas.pdfIn PDF document text
- https://www.apartmanychorvatsko24.cz/images/roblox-robux-free-2021-an-fr.pdfIn PDF document text
- http://nosocomium.rv.ua/images/free-robux-no-logo.pdfIn PDF document text
- https://verdensbarn.no/images/how-to-get-a-free-roblox-pants.pdfIn PDF document text
- https://esl.ipb.ac.id/images/free-roblox-like-botsw.pdfIn PDF document text
- http://salantiskis.lt/images/hacking-tycoon-roblox.pdfIn PDF document text
- http://classicskitours.net/images/roblox-download-free-online.pdfIn PDF document text
- http://echosvoix.ch/images/free-codeon-roblox.pdfIn PDF document text
- http://greasley.online/images/free-money-boku-no-hero-roblox.pdfIn PDF document text
- http://domaizdereva24.ru/images/free-roblox-card-numbers.pdfIn PDF document text
- https://www.belgium-archery.be/images/roblox-free-roblox-gift-card-codes.pdfIn PDF document text
- http://www.pro-futuro.eu/images/free-admin-roblox-game.pdfIn PDF document text
- http://s-punkt-objects.de/images/roblox-jailbreak-cheat-table.pdfIn PDF document text
- http://www.gadanie.lv/images/how-to-hack-your-friends-in-roblox.pdfIn PDF document text
- https://inspiration-modellbau.de/images/claim-gg-earn-free-robux-for-roblox.pdfIn PDF document text
- https://gastroration.ru/images/roblox-magitan-hack-2021.pdfIn PDF document text
- https://www.porthos.it/images/how-to-get-bear-mask-free-roblox.pdfIn PDF document text
- http://eurosystemssrl.it/images/cheat-terminal-railway-roblox.pdfIn PDF document text
- https://www.ausecus.com/images/roblox-star-wars-roleplay-space-hack.pdfIn PDF document text
- http://www.kalaaliaraq.dk/images/roblox-sword-simulator-power-hack.pdfIn PDF document text
- http://interpretation-dessins-enfants.net/images/roblox-prison-life-hack-script.pdfIn PDF document text
+11 more URL(s)
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_003_off00007fb8.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x7FB8 | 24860 bytes |
SHA-256: c0083a0b1b18cfdf819df613a01fa48af16a985153324968e6f2c59243dd03dd |
|||
font_01_sfnt_off0000b907.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xB907 | 19060 bytes |
SHA-256: dc5fd33cb1a96dcb39f9f0f6b5c35f21ea6388148072457fc6735a297afcc527 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.