SUSPICIOUS
42
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
This PDF document was flagged as suspicious by an ML classifier. The file presents a deceptive download button. Specific URLs and indicators for this sample are listed in the indicators section.
Machine Learning
- Nyx PDF Classifier malicious score 0.9434
Heuristics 3
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/roblox-gui-hack-jailbreak PDF link annotation
- https://www.milewood.co.uk/images/best-roblox-scripts-to-hack-games-feree.pdfIn PDF document text
- https://kimolos-link.gr/images/how-do-you-hack-on-roblox-mad-paintball.pdfIn PDF document text
- https://estalagemmonteverde.com.br/images/free-afro-roblox.pdfIn PDF document text
- https://estalagemmonteverde.com.br/images/how-to-hack-roblox-accounts-with-cheat-engine.pdfIn PDF document text
- https://kimolos-link.gr/images/how-to-play-minion-free-tag-roblox.pdfIn PDF document text
- http://www.drent.se/images/how-t-oget-ant-free-robux.pdfIn PDF document text
- http://dos.most.gov.la/images/free-robux-no-dealas.pdfIn PDF document text
- https://www.najeebqasmi.com/images/roblox-wanted-money-hack.pdfIn PDF document text
- http://www.drent.se/images/join-my-group-for-free-robux.pdfIn PDF document text
- http://www.cosver.nl/images/do-do-you-get-robux-for-free.pdfIn PDF document text
- http://svp-steinmaur.ch/images/free-robux-obbys-may-2021.pdfIn PDF document text
- http://www.pcclawyers.com.au/images/roblox-online-free-no-download.pdfIn PDF document text
- http://uctovnictvosnv.sk/images/free-font-that-looks-like-roblox.pdfIn PDF document text
- https://www.utalii.ac.ke/images/code-to-have-all-free-roblox.pdfIn PDF document text
- https://verdensbarn.no/images/hacker-shirts-roblox.pdfIn PDF document text
- https://www.romedia.gr/images/how-to-hack-the-greenwood-town-roblox.pdfIn PDF document text
- http://poltekkeskhjogja.ac.id/images/roblox-retail-tycoon-cheat-engine-download.pdfIn PDF document text
- http://www.remiauclair.fr/images/how-to-hack-into-somebodys-roblox-account.pdfIn PDF document text
- http://escolaarboc.cat/images/roblox-fly-hacks-2021.pdfIn PDF document text
- https://www.hbproducts.dk/images/mcdonaldsville-roblox-hack-script.pdfIn PDF document text
- http://ns1.radiofacil.net/images/free-roblox-gift-card-codes-july-2021.pdfIn PDF document text
- https://www.sitiwebjoomla.it/images/roblox-hacks-lua-vs-lua-c.pdfIn PDF document text
- http://www.visiblefilm.com/images/by-roblox-for-free.pdfIn PDF document text
- http://www.sanjosedeminas.gob.ec/images/roblox-star-code-free.pdfIn PDF document text
- https://www.sitiwebjoomla.it/images/robux-tool-hack.pdfIn PDF document text
- https://estalagemmonteverde.com.br/images/dowload-hacks-for-roblox.pdfIn PDF document text
- https://www.yewtreealpacas.co.uk/images/roblox-jailbreak-hack-no-virus.pdfIn PDF document text
- https://www.saisystem.it/images/roblox-20-body-free.pdfIn PDF document text
- https://reggieslockandkey.com/images/roblox-cheats-for-robux-and-tix-2021.pdfIn PDF document text
- http://www.maakherumusic.net/images/roblox-egg-hunt-2021-hacker-egg.pdfIn PDF document text
- http://www.copoint.co.uk/images/yotube-hacker-robux.pdfIn PDF document text
- https://www.utalii.ac.ke/images/free-robux-plz.pdfIn PDF document text
- http://energotestcontrol.ru/images/free-tshhirt-roblox.pdfIn PDF document text
- http://www.pcclawyers.com.au/images/how-to-get-free-diamonds-in-roblox-royale-high-school.pdfIn PDF document text
- https://www.academiaanticorrupcion.org/images/robux-generatr-hack-2021.pdfIn PDF document text
- https://kimolos-link.gr/images/randroia-robux-hack.pdfIn PDF document text
- http://www.anies.eu/images/roblox-hack-to-get-free-robux-2021.pdfIn PDF document text
- http://agrao.in/images/roblox-steve-one-piece-hack-tp-chest.pdfIn PDF document text
- https://www.osoc.com/images/download-cheat-roblox-jailbreak-for-pc.pdfIn PDF document text
- https://www.stkdb.cz/images/roblox-hack-2021.pdfIn PDF document text
- http://agrao.in/images/free-robux-2021-no-human-verification.pdfIn PDF document text
- http://cosver.eu/images/clover-online-roblox-gui-hack.pdfIn PDF document text
- https://sitam.co.in/images/roblox-waterpark-noodle-for-free.pdfIn PDF document text
- https://www.cpnf.ch/images/gladiator-simulator-roblox-hacks.pdfIn PDF document text
- http://dos.most.gov.la/images/how-to-get-everything-free-on-roblox.pdfIn PDF document text
- http://www.zdravazena.sk/images/hacking-coolrichytimemax-in-roblox-youtube.pdfIn PDF document text
- https://kimolos-link.gr/images/d-day-cheats-roblox.pdfIn PDF document text
- http://iluvlocalplaces.com/images/roblox-hack-unlimited-robux.pdfIn PDF document text
- https://www.ncscolour.no/images/free-parris-island-roblox.pdfIn PDF document text
+2 more URL(s)
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_003_off00005741.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x5741 | 24004 bytes |
SHA-256: a669a4f7f93636ce50433e4dbe650af5be148a9ea8e7bfe3b22963523287ae16 |
|||
font_01_sfnt_off00008df5.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x8DF5 | 17980 bytes |
SHA-256: 6114c9bac9a7c1f640b9d365e0ae3e82f26df43b674d32408719121bbb24d0f8 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.