SUSPICIOUS
42
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
This PDF document was flagged as suspicious by an ML classifier. The file presents a deceptive download button. Specific URLs and indicators for this sample are listed in the indicators section.
Machine Learning
- Nyx PDF Classifier malicious score 0.7795
Heuristics 3
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/how-to-get-hacks-in-roblox-booga-booga PDF link annotation
- https://www.dierenartsberghman.be/images/free-roblox-card-1m-codes.pdfIn PDF document text
- http://artindex.pro/images/youtube-the-coolunique-free-robux.pdfIn PDF document text
- http://berntfoto.dk/images/how-to-get-free-money-on-roblox-rocitizens.pdfIn PDF document text
- http://soma.com.ua/images/roblox-rush-com-free-robux.pdfIn PDF document text
- http://www.brtes.com/images/roblox-promocodes-for-free-robux.pdfIn PDF document text
- http://lesvossolidarity.org/images/how-to-get-free-wings-in-roblox-2021-may.pdfIn PDF document text
- http://bilhetim.com.br/images/roblox-cheat-engine-table-2021.pdfIn PDF document text
- http://asiasieja.pl/images/roblox-comment-metre-un-script-cheat.pdfIn PDF document text
- https://www.porthos.it/images/free-roblox-no-virus.pdfIn PDF document text
- http://linens.kiev.ua/images/free-robux-v3rmillion-site-v3rmillionnet.pdfIn PDF document text
- http://www.remiauclair.fr/images/how-to-get-free-robux-june-28-2021.pdfIn PDF document text
- http://lewishome.net/images/biulders-club-robloxcom-free-robux.pdfIn PDF document text
- http://pourvosvacances.com/images/how-to-hack-into-peoples-account-in-roblox.pdfIn PDF document text
- http://baah.ca/images/how-to-dress-like-a-hacker-in-roblox.pdfIn PDF document text
- http://goosesscuba.com/images/do-you-get-free-robux-roblox.pdfIn PDF document text
- http://www.nielsen2u.dk/images/roblox-gainer-free.pdfIn PDF document text
- http://agrao.in/images/how-to-get-everything-for-free-in-roblox.pdfIn PDF document text
- https://www.laarsenco.nl/images/how-to-get-robux-for-free-on-bowser.pdfIn PDF document text
- http://dottgagliardi.com/images/how-to-hack-bed-wars-2-on-roblox.pdfIn PDF document text
- http://lekarinfo.mk/images/you-cant-get-robux-for-free.pdfIn PDF document text
- http://scarlier.fr/images/free-roblox-clothes-codes.pdfIn PDF document text
- http://www.lycee-langevin-wallon.com/images/roblox-mad-paintball-2-free.pdfIn PDF document text
- http://ilccanada.org/images/roblox-piano-sheets-hack.pdfIn PDF document text
- http://sauer-umweltservice.de/images/real-free-robux-obby.pdfIn PDF document text
- http://garrisonjazz.com/images/20219-walkspeed-roblox-cheat.pdfIn PDF document text
- https://www.wildpark-johannismuehle.de/images/roblox-hxh-id-cheat.pdfIn PDF document text
- http://teknotools.net/images/roblox-dungeon-quest-money-hack.pdfIn PDF document text
- https://sanjoseelectricians.net/images/roblox-jailbreak-hack-money-no-human-verification.pdfIn PDF document text
- https://www.fhccu.com/images/craftwars-roblox-hack.pdfIn PDF document text
- http://www.ntc.edu.za/images/roblox-coolkid-hack.pdfIn PDF document text
- http://sscclc.edu.ec/images/robux-money-hack.pdfIn PDF document text
- https://esl.ipb.ac.id/images/free-robux-hack-no-generator.pdfIn PDF document text
- http://babbibooth.com/images/can-you-use-cheat-egine-for-roblox.pdfIn PDF document text
- http://italymania.ru/images/roblox-dragon-ball-rage-hack-2021.pdfIn PDF document text
- http://killebergsridsport.se/images/how-to-hack-mad-city-in-roblox.pdfIn PDF document text
- https://www.romedia.gr/images/roblox-sin-hacks.pdfIn PDF document text
- http://techmobil.pl/images/roblox-scripts-download-hack.pdfIn PDF document text
- https://www.foodsafety.cz/images/roblox-new-shoot-though-walls-hack.pdfIn PDF document text
- http://adenmarks.se/images/free-robux-download-no-virus.pdfIn PDF document text
- http://www.anies.eu/images/acheter-des-robux-free.pdfIn PDF document text
- http://biccairo.com/images/how-to-get-robux-for-free-no-human-verification-ipad.pdfIn PDF document text
- http://hotel-buta.by/images/free-robux-no-survey-no-human-verification-2021.pdfIn PDF document text
- http://iluvlocalplaces.com/images/roblox-hack-chaos-wacher.pdfIn PDF document text
- http://boliviagasenergia.com/images/instalation-cheat-strucid-roblox.pdfIn PDF document text
- http://www.rezbb.sk/images/roblox-free-play-on-google.pdfIn PDF document text
- http://jointworkstudio.com/images/how-to-hack-roblox-players-accounts.pdfIn PDF document text
- http://finettifrs.it/images/roblox-how-to-get-in-bloxburg-for-free-2021.pdfIn PDF document text
- http://www.occquimica.com.br/images/how-to-speed-hack-on-roblox-2021.pdfIn PDF document text
- http://www.teapotjewelry.com/images/free-robux-free-hack.pdfIn PDF document text
+9 more URL(s)
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_003_off00007dd6.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x7DD6 | 27148 bytes |
SHA-256: 7a2e215182291a3ef80341110e6936cf33db8ebc2c6a5ffa821fcc7927bcbc42 |
|||
font_01_sfnt_off0000bb39.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xBB39 | 18308 bytes |
SHA-256: 5e7d0fa90ecfa3f22832e44ab434a579ef43d93ca4c489a7da4f3e71e63ea9c0 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.