SUSPICIOUS
42
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
This PDF document was flagged as suspicious by an ML classifier. The file presents a deceptive download button. Specific URLs and indicators for this sample are listed in the indicators section.
Machine Learning
- Nyx PDF Classifier malicious score 0.6397
Heuristics 3
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/hack-de-robux PDF link annotation
- https://www.hotschool.com.au/images/how-to-get-any-roblox-game-pass-for-free.pdfIn PDF document text
- http://sealysports.com/images/free-cookie-swirl-c-shirt-roblox.pdfIn PDF document text
- http://www.lionel-seppoloni.fr/images/how-to-get-offsale-stuff-on-roblox-free.pdfIn PDF document text
- http://www.visiblefilm.com/images/robux-gratis-funciona-hack-sin-cortes.pdfIn PDF document text
- http://somvisio.es/images/free-federa-roblox.pdfIn PDF document text
- http://www.visiblefilm.com/images/roblox-hack-v414.pdfIn PDF document text
- http://www.prylfabriken.se/images/free-roblox-condo-map.pdfIn PDF document text
- http://aeroclub-kaernten.at/images/roblox-hack-robux-free-2021.pdfIn PDF document text
- https://www.laarsenco.nl/images/roblox-shirt-id-free-shipping.pdfIn PDF document text
- https://www.gymun.cz/images/free-roblox-money-com.pdfIn PDF document text
- http://bned-leader.co.uk/images/how-to-hack-the-roblox-birthday-system.pdfIn PDF document text
- http://karldall.dk/images/unpatchable-robux-hack-robuxian.pdfIn PDF document text
- http://rafaelmontesinos.com/images/how-to-hack-and-get-robux-2021.pdfIn PDF document text
- http://kim-kinder-im-mittelpunkt.de/images/free-roblox-games-on-computer.pdfIn PDF document text
- http://iacovoulaw.com/images/free-robux-no-human-verification-pc.pdfIn PDF document text
- https://www.cfdcnv.com/images/fortnite-skins-free-for-roblox.pdfIn PDF document text
- http://smart-pro.co.uk/images/robux-cheats-2021.pdfIn PDF document text
- http://lanoblaie.fr/images/how-to-hack-players-on-roblox.pdfIn PDF document text
- http://www.peterdejonge.nl/images/how-do-you-hack-someones-roblox-account.pdfIn PDF document text
- https://www.cnte.org.br/images/roblox-obc-cheat.pdfIn PDF document text
- http://www.remiauclair.fr/images/sewer-roblox-jailbreak-hack.pdfIn PDF document text
- http://harmonygardens.ca/images/how-to-get-free-clothes-on-roblox-ipad.pdfIn PDF document text
- http://mydevice.com.au/images/free-roblox-hoods.pdfIn PDF document text
- https://www.knxuk.org/images/overhaul-roblox-free-shop.pdfIn PDF document text
- http://vagency.us/images/roblox-download-pc-hack.pdfIn PDF document text
- http://baah.ca/images/how-to-free-cloths-roblox-no-robux-or-inspect.pdfIn PDF document text
- https://www.fenews.co.uk/images/roblox-attack-on-titan-hack.pdfIn PDF document text
- http://www.les2alpes-location.com/images/roblox-iphone-hack.pdfIn PDF document text
- http://agroturismoarkaia.com/images/free-robux-no-human-verification-or-app-download.pdfIn PDF document text
- https://europainstitut.hu/images/pokemon-ultra-sun-roblox-cheat.pdfIn PDF document text
- http://mydevice.com.au/images/roblox-dino-toy-codes-free.pdfIn PDF document text
- http://asandawireless.co.za/images/free-and-easy-robux.pdfIn PDF document text
- https://www.ncscolour.no/images/how-to-change-username-on-roblox-free.pdfIn PDF document text
- http://ff-obertraun.at/images/speed-hack-roblox-2021-in-any-game.pdfIn PDF document text
- https://accord.kiev.ua/images/adopt-me-roblox-getting-hacked.pdfIn PDF document text
- https://hassel-event.de/images/roblox-free-mouse.pdfIn PDF document text
- https://pagadder.com/images/roblox-hack-animation-script.pdfIn PDF document text
- http://zarinnameh.ir/images/how-to-hack-roblox-games-ios.pdfIn PDF document text
- http://sandra-masemann.de/images/how-to-get-roblox-free-2021.pdfIn PDF document text
- https://www.hofe-gmbh.de/images/cool-aoutfits-for-free-in-roblox.pdfIn PDF document text
- https://www.academiaanticorrupcion.org/images/claimrbx-earn-free-robux.pdfIn PDF document text
- https://www.utalii.ac.ke/images/how-to-use-skidama-level-7-roblox-hacks.pdfIn PDF document text
- http://lakeshistory.com/images/free-clothes-giveaway-roblox.pdfIn PDF document text
- https://www.gvandenakker.nl/images/free-medieval-clothes-on-roblox.pdfIn PDF document text
- http://www.drent.se/images/roblox-i-hacked-my-fans.pdfIn PDF document text
- http://chartsmart.com.au/images/free-roblox-card-pins-2021.pdfIn PDF document text
- http://jugendfeuerwehr-scheinfeld.de/images/roblox-gamepass-e-free.pdfIn PDF document text
- https://pa-waingapu.go.id/images/can-you-get-free-robux-on-your-birthday.pdfIn PDF document text
- http://alexandrion.com/images/how-to-recover-your-hacked-roblox-account.pdfIn PDF document text
+12 more URL(s)
Extracted artifacts 3
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_003_off0000800a.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x800A | 26348 bytes |
SHA-256: d7fa5ebcbeaf70338c06b18495e780f9b16ae29c934cfc74ef60cce1f3e7e1d4 |
|||
font_01_sfnt_off0000b9d3.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xB9D3 | 2844 bytes |
SHA-256: baad2f3f6808f4af03fa9398e38c580c8d846f7f773a947d8cc1f39b2753d31a |
|||
font_02_sfnt_off0000c394.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xC394 | 17632 bytes |
SHA-256: e3277e4a43e01a1d4592768c43f6d02ad847feb791cfdaf9dcfad205f506c2ce |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.