SUSPICIOUS
42
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
This PDF document was flagged as suspicious by an ML classifier. The file presents a deceptive download button. Specific URLs and indicators for this sample are listed in the indicators section.
Machine Learning
- Nyx PDF Classifier malicious score 0.6193
Heuristics 3
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/dll-hack-for-roblox-2021 PDF link annotation
- https://www.sitiwebjoomla.it/images/google-how-to-get-free-robux-on-roblox.pdfIn PDF document text
- http://homequeen.de/images/roblox-speed-hack-lua-script.pdfIn PDF document text
- http://domaizdereva24.ru/images/free-robux-pastebin-no-wait.pdfIn PDF document text
- http://jugendfeuerwehr-scheinfeld.de/images/roblox-games-to-play-online-for-free.pdfIn PDF document text
- http://keepcasscountybeautiful.com/images/trade-hangout-roblox-ask-robux-free.pdfIn PDF document text
- http://fmbompastor.com.br/images/free-roblox-card-giveaway.pdfIn PDF document text
- http://viemeo.fr/images/roblox-apps-info-roblox-robux-hack-generator.pdfIn PDF document text
- http://mebliok.com.ua/images/roblox-robux-free-promo-codes.pdfIn PDF document text
- http://stomatolog-choszczno.pl/images/roblox-admin-hack-dll.pdfIn PDF document text
- https://zszolesno.pl/images/hack-roblox-android-apk.pdfIn PDF document text
- https://www.lomrad.go.th/images/robuxian-free-robux-website.pdfIn PDF document text
- http://www.cosver.nl/images/roblox-fly-hack.pdfIn PDF document text
- https://verdensbarn.no/images/how-to-hack-roblox-accounts-2021-mobile.pdfIn PDF document text
- https://fkg.usu.ac.id/images/break-free-song-id-roblox.pdfIn PDF document text
- http://ambingenieria.com/images/free-roblox-accounts-2021.pdfIn PDF document text
- http://horsa18.ru/images/how-to-get-free-hair-roblox-2021.pdfIn PDF document text
- https://osk-sibir.ru/images/free-robux-h-ck.pdfIn PDF document text
- http://arcnjournals.org/images/free-fmswat-camp-roblox.pdfIn PDF document text
- http://www.mjclautrec.fr/images/roblox-games-that-can-give-you-free-robux.pdfIn PDF document text
- http://shiny-nn.ru/images/roblox-free-level-7-exploit.pdfIn PDF document text
- http://svp-steinmaur.ch/images/get-a-free-roblox-gift-card.pdfIn PDF document text
- http://www.vktzunami.cz/images/hack-script-roblox-jailbreak.pdfIn PDF document text
- http://arthakranti.org/images/wahoo-gaming-free-robux.pdfIn PDF document text
- http://instrumenttut.by/images/how-to-hack-roblox-for-robux-on-computer.pdfIn PDF document text
- https://www.lomrad.go.th/images/how-to-get-vip-servers-for-free-on-roblox.pdfIn PDF document text
- https://www.knxuk.org/images/roblox-game-hacks-2021.pdfIn PDF document text
- https://www.lomrad.go.th/images/cheat-pc-roblox.pdfIn PDF document text
- https://septik-montag.ru/images/free-rap-lyrics-for-roblox.pdfIn PDF document text
- https://kldcardio.ru/images/free-robux-app-on-pc.pdfIn PDF document text
- http://fairwaygolftravel.co.uk/images/hack-any-roblox-account-2021.pdfIn PDF document text
- https://gomsa.nl/images/roblox-fashion-famous-free-game.pdfIn PDF document text
- http://www.eaapiaria.es/images/how-to-use-cheat-engine-on-roblox-jailbreak-for-money.pdfIn PDF document text
- https://www.stayon.no/images/how-to-hack-roblox-high-school-money.pdfIn PDF document text
- http://jenne-technik.de/images/how-to-cheat-andget-things-that-cost-robux-without-robux.pdfIn PDF document text
- http://grand-ural74.ru/images/roblox-adopt-and-raise-a-cute-kid-free-admin.pdfIn PDF document text
- https://www.coriglianocalabro.it/images/cheat-jailbreak-roblox-2021.pdfIn PDF document text
- https://verdensbarn.no/images/roblox-free-old-accounts.pdfIn PDF document text
- http://www.sapaengineering.kz/images/does-cheat-engine-work-on-roblox-vehicle-simulator.pdfIn PDF document text
- https://icefuture.ru/images/roblox-free-domino-crown.pdfIn PDF document text
- http://ghhs.com.my/images/free-robux-just-freind-me.pdfIn PDF document text
- http://haertetechnik-steinbach.de/images/free-robux-no-verification-no-survey-2021.pdfIn PDF document text
- http://optiquedelavaunage.com/images/free-robux-gift-card-codes-no-human-verification.pdfIn PDF document text
- http://www.anies.eu/images/descargar-roblox-hackeado-con-robux.pdfIn PDF document text
- http://www.inservis.cl/images/meep-city-kid-gives-free-robux.pdfIn PDF document text
- http://www.pbconsulting.it/images/roblox-2021-robux-free.pdfIn PDF document text
- https://www.lavigny.ch/images/hack-work-at-a-pizza-place-roblox.pdfIn PDF document text
- https://www.brainpads.com/images/try-on-all-animations-for-free-roblox-script.pdfIn PDF document text
- http://www.prylfabriken.se/images/roblox-how-to-get-free-shirts-2021-working-with-voice.pdfIn PDF document text
- https://domoticaaplicada.com/images/roblox-farming-simulator-cheats.pdfIn PDF document text
+13 more URL(s)
Extracted artifacts 3
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_003_off000080c8.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x80C8 | 25832 bytes |
SHA-256: 8dce514a383c0f181a80e79ac0263d05cd976530057967363e2110ac37ac6f5b |
|||
font_01_sfnt_off0000bb64.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xBB64 | 2832 bytes |
SHA-256: 77ae1c4cffa647a8fd533dfa4102e94364989f9e80b9cd131876e9d1005899a2 |
|||
font_02_sfnt_off0000c514.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xC514 | 18160 bytes |
SHA-256: 6c00bd02cc6d1fbc1ed0cb5cca7f9b690002a381f15912c2e52a355bf6958666 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.