SUSPICIOUS
42
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
This PDF document was flagged as suspicious by an ML classifier. The file presents a deceptive download button. Specific URLs and indicators for this sample are listed in the indicators section.
Machine Learning
- Nyx PDF Classifier malicious score 0.9192
Heuristics 3
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/roblox-treasure-wuest-how-to-get-effects-for-free PDF link annotation
- https://www.cosmosdawn.net/images/free-robux-with-developer-tools-on-chrome.pdfIn PDF document text
- http://www.mjclautrec.fr/images/how-to-get-free-robux-from-cash-for-apps.pdfIn PDF document text
- http://www.cosver.nl/images/redeem-roblox-cards-free-codes-2021.pdfIn PDF document text
- https://amatq.ca/images/how-to-hack-on-roblox-2021.pdfIn PDF document text
- http://escolaarboc.cat/images/how-to-get-my-hacked-account-back-on-roblox.pdfIn PDF document text
- http://ff-obertraun.at/images/april-fools-hack-roblox.pdfIn PDF document text
- https://www.hbproducts.dk/images/free-roblox-gift-card-26-11-2021.pdfIn PDF document text
- https://www.osoc.com/images/free-roblox-accounts-dump.pdfIn PDF document text
- http://www.sapaengineering.kz/images/cheat-super-training-simulator-roblox.pdfIn PDF document text
- https://www.air-shop.cz/images/free-robux-hack-generator-no-human-verification-or-survey.pdfIn PDF document text
- http://agrao.in/images/roblox-get-boombox-free-cheat.pdfIn PDF document text
- https://www.dierenartsberghman.be/images/how-to-hack-linkmon99-roblox.pdfIn PDF document text
- http://nevesomost.by/images/how-to-hack-someone-in-roblox-2021.pdfIn PDF document text
- https://www.air-shop.cz/images/robux-freee-hack.pdfIn PDF document text
- http://sscclc.edu.ec/images/free-jurassic-park-roblox-backpack.pdfIn PDF document text
- http://www.rezbb.sk/images/free-robux-by-roblox-events-claim-gg.pdfIn PDF document text
- https://estalagemmonteverde.com.br/images/roblox-download-apk-hack-robux.pdfIn PDF document text
- http://bkd1.balikpapan.go.id/images/how-to-get-free-robux-without-paying-any-money.pdfIn PDF document text
- http://www.hawler.in/images/assassin-roblox-hacked.pdfIn PDF document text
- http://gops.pruszczgdanski.pl/images/roblox-lucky-blocks-hack.pdfIn PDF document text
- http://www.gadanie.lv/images/how-to-create-your-own-roblox-hack-script.pdfIn PDF document text
- https://www.foodsafety.cz/images/discord-roblox-fr-hack.pdfIn PDF document text
- http://www.web.stc-part.co.th/images/roblox-hack-download-android-2021.pdfIn PDF document text
- http://echosvoix.ch/images/free-robux-codes-without-human-verification.pdfIn PDF document text
- http://www.evaplast.by/images/roblox-exploit-hack-download-2021.pdfIn PDF document text
- http://domaizdereva24.ru/images/cch-ly-robux-free-2021.pdfIn PDF document text
- https://www.tsdb.com.au/images/roblox-cheat-engine-hack-codes.pdfIn PDF document text
- http://nosocomium.rv.ua/images/free-robux-no-human-verification-2021-working.pdfIn PDF document text
- https://www.udivadlahotel.cz/images/do-any-roblox-hacks-work.pdfIn PDF document text
- https://www.tsdb.com.au/images/can-you-make-free-shirts-on-roblox.pdfIn PDF document text
- https://technospektr.com.ua/images/play-games-online-free-roblox.pdfIn PDF document text
- https://www.cnte.org.br/images/free-robux-legit-no-human-verification.pdfIn PDF document text
- https://www.abrapppe.org.br/images/how-to-become-an-admin-on-roblox-for-free.pdfIn PDF document text
- http://nevesomost.by/images/roblox-free-ps3-download.pdfIn PDF document text
- http://www.anies.eu/images/comment-cheat-sur-roblox-avec-cheat-engine.pdfIn PDF document text
- https://verdensbarn.no/images/how-tom-get-games-free-roblox.pdfIn PDF document text
- http://www.remiauclair.fr/images/aos-hack-roblox.pdfIn PDF document text
- http://www.rezbb.sk/images/shadowslayefighter-in-roblox-robux-hack.pdfIn PDF document text
- https://www.cnte.org.br/images/cheat-engine-robux-2021.pdfIn PDF document text
- https://verdensbarn.no/images/hacker-vs-pro-roblox.pdfIn PDF document text
- http://www.maakherumusic.net/images/roblox-shirt-templates-free.pdfIn PDF document text
- http://cosver.eu/images/i-got-hacked-in-roblox-lost-robux.pdfIn PDF document text
- https://www.beaufortcollege.ie/images/how-does-roblox-gg-hack-your-acc.pdfIn PDF document text
- http://www.lovecraftiana.com.ar/images/roblox-non-free-models.pdfIn PDF document text
- http://nevesomost.by/images/10-know-this-give-free-robux-secret.pdfIn PDF document text
- http://www.occquimica.com.br/images/como-conseguir-badges-hack-roblox.pdfIn PDF document text
- http://www.sapaengineering.kz/images/how-to-get-free-robux-2021-september.pdfIn PDF document text
- http://www.agri-tech.com.au/images/tutorial-avanzado-de-cheat-engine-para-dragon-ball-range-roblox.pdfIn PDF document text
- http://escolaarboc.cat/images/hacking-discord-server-roblox.pdfIn PDF document text
+2 more URL(s)
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
font_00_sfnt_off0000584e.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x584E | 25892 bytes |
SHA-256: f5fcba0776d53f723426e72d6498e64e463ba61bab497fe5380e3f70ed864e6b |
|||
font_01_sfnt_off000091e9.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x91E9 | 18508 bytes |
SHA-256: 321ed87178d0e48fdb2e4ae62ee41236e1711bf5756798361fdd4f2e80aa6a4d |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.