SUSPICIOUS
42
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
This PDF document was flagged as suspicious by an ML classifier. The file presents a deceptive download button. Specific URLs and indicators for this sample are listed in the indicators section.
Machine Learning
- Nyx PDF Classifier malicious score 0.9434
Heuristics 3
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/free-outfit-from-roblox PDF link annotation
- https://crank.ee/images/free-free-roblox-games.pdfIn PDF document text
- http://www.htc.edu.au/images/roblox-hacks-phantom-forces-2021.pdfIn PDF document text
- http://nevesomost.by/images/ww-free-robux.pdfIn PDF document text
- http://www.tamogatoweb.hu/images/how-to-get-clothes-free-on-roblox.pdfIn PDF document text
- https://www.elevage-chiot.fr/images/account-hacking-software-roblox.pdfIn PDF document text
- http://zarinnameh.ir/images/robux-cheat-websites.pdfIn PDF document text
- http://www.mikramarine.gr/images/free-cute-hair-for-roblox.pdfIn PDF document text
- http://www.pcclawyers.com.au/images/happymod-roblox-hack.pdfIn PDF document text
- http://cosver.eu/images/denis-free-robux-obby-omg.pdfIn PDF document text
- https://www.wildpark-johannismuehle.de/images/how-to-get-free-robux-without-having-to-download-anything.pdfIn PDF document text
- http://www.hawler.in/images/1-000-subscriber-roblox-hack-tool.pdfIn PDF document text
- http://bilhetim.com.br/images/roblox-free-hats-glitch.pdfIn PDF document text
- https://www.ncscolour.no/images/roblox-vheicle-simulator-hacks.pdfIn PDF document text
- https://corbo.ru/images/robloxmania-com-free-robux.pdfIn PDF document text
- https://www.beaufortcollege.ie/images/how-too-hack-in-murder-mystery-2-roblox.pdfIn PDF document text
- https://corbo.ru/images/how-hack-in-roblox.pdfIn PDF document text
- http://www.occquimica.com.br/images/hacks-on-jailbreak-roblox.pdfIn PDF document text
- http://gops.pruszczgdanski.pl/images/hackbox-roblox.pdfIn PDF document text
- http://www.gadanie.lv/images/roblox-cheat-engine-download-2021.pdfIn PDF document text
- https://www.cpnf.ch/images/roblox-hack-god-mode-phantom-forces.pdfIn PDF document text
- https://gomsa.nl/images/free-app-rewards-robux.pdfIn PDF document text
- http://www.htc.edu.au/images/how-to-buy-promo-items-for-free-on-roblox.pdfIn PDF document text
- https://www.cpnf.ch/images/how-to-get-free-robux-2021-no-hack.pdfIn PDF document text
- http://kids-academy.pl/images/how-to-hack-easy-2021-roblox.pdfIn PDF document text
- http://www.web.stc-part.co.th/images/roblox-script-executor-2021-free.pdfIn PDF document text
- http://nosocomium.rv.ua/images/comment-hacker-dans-roblox-pc.pdfIn PDF document text
- http://www.gadanie.lv/images/roblox-free-red-pants.pdfIn PDF document text
- https://esl.ipb.ac.id/images/how-to-get-free-shards-without-robux-on-shard-seekers.pdfIn PDF document text
- https://jdlgroup.ca/images/roblox-kat-hacks.pdfIn PDF document text
- http://salantiskis.lt/images/free-robux-with-out-rewards.pdfIn PDF document text
- https://www.tsdb.com.au/images/filedropper-roblox-hack.pdfIn PDF document text
- http://www.drent.se/images/roblox-cheat-engine-and-ccv5-bypass.pdfIn PDF document text
- https://technospektr.com.ua/images/free-robux-instantly-2021.pdfIn PDF document text
- https://verdensbarn.no/images/anyone-use-roblox-hacks.pdfIn PDF document text
- https://www.cnte.org.br/images/muffin-combat-hack-roblox.pdfIn PDF document text
- https://socialvalue.gr/images/how-to-hack-roblox-accounts-2021-july.pdfIn PDF document text
- http://poltekkeskhjogja.ac.id/images/how-to-hack-roblox-so-i-can-get-robux.pdfIn PDF document text
- http://uctovnictvosnv.sk/images/cerberus-roblox-exploit-free.pdfIn PDF document text
- https://www.beaufortcollege.ie/images/free-robux-generator-2021-no-scam.pdfIn PDF document text
- http://www.nielsen2u.dk/images/how-to-hack-roblox-to-get-free-robux.pdfIn PDF document text
- https://www.air-shop.cz/images/free-robux-hack-that-easy-and-o.pdfIn PDF document text
- http://www.agri-tech.com.au/images/hack-strucid-roblox-aimbot.pdfIn PDF document text
- http://pa-tanjungselor.go.id/images/how-to-hack-roblox-jailbreak-money-with-cheat-engine.pdfIn PDF document text
- http://www.agri-tech.com.au/images/free-robux-pins-for-sale.pdfIn PDF document text
- https://www.iadh.bi/images/how-to-get-free-rs-in-roblox.pdfIn PDF document text
- http://poltekkeskhjogja.ac.id/images/http-hack-roblox.pdfIn PDF document text
- http://www.brtes.com/images/nuvos-hack-de-roblox-6-05-2021.pdfIn PDF document text
- http://www.fanciullovito.it/images/how-to-get-free-robux-using-hackbar-extension.pdfIn PDF document text
- https://kimolos-link.gr/images/how-to-get-25-robux-for-free-2021.pdfIn PDF document text
+2 more URL(s)
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_003_off0000584c.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x584C | 23524 bytes |
SHA-256: 38a66592ce64a46912feffd7c827210a91f99362b9b16ac8b2eda21353458036 |
|||
font_01_sfnt_off00008d83.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x8D83 | 17964 bytes |
SHA-256: 3f67327d90a2ce9c872d6ff682d10ccdf4d526c3e973a21ebb4215e5d415ddbe |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.