SUSPICIOUS
42
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
This PDF document was flagged as suspicious by an ML classifier. The file presents a deceptive download button. Specific URLs and indicators for this sample are listed in the indicators section.
Machine Learning
- Nyx PDF Classifier malicious score 0.7795
Heuristics 3
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/roblox-whatever-floats-your-boat-level-hack-2021 PDF link annotation
- http://chartsmart.com.au/images/guess-that-song-cheat-list-roblox.pdfIn PDF document text
- http://kontaktadig.se/images/roblox-hack-ios-2021.pdfIn PDF document text
- http://mycounty.com.ua/images/roblox-speed-hack-cheat-engine-vermillion.pdfIn PDF document text
- http://lechia-sedziszow.pl/images/how-to-hack-jailbreak-on-roblox.pdfIn PDF document text
- https://www.saisystem.it/images/free-vip-server-for-roblox-labyrinth.pdfIn PDF document text
- http://www.occquimica.com.br/images/free-robux-hack-ios.pdfIn PDF document text
- http://homequeen.de/images/contact-roblox-about-being-hacked.pdfIn PDF document text
- http://evro-okna.net/images/roblox-cash-free.pdfIn PDF document text
- http://mittlenberg.ch/images/roblox-hack-diamond.pdfIn PDF document text
- https://reggieslockandkey.com/images/how-to-get-any-gamepass-on-roblox-for-free-2021.pdfIn PDF document text
- https://www.albisser.ch/images/roblox-free-robux-glitch.pdfIn PDF document text
- http://kermas.eu/images/how-to-get-free-robux-2021-inspect-element.pdfIn PDF document text
- http://autismoalbacete.org/images/banning-hack-roblox-working-2021.pdfIn PDF document text
- http://www.it-ro.it/images/free-sirt-maker-for-roblox.pdfIn PDF document text
- http://damvallei.be/images/how-to-execute-localscripts-on-roblox-hack.pdfIn PDF document text
- http://www.barkas-n-i.gr/images/free-roblox-acc.pdfIn PDF document text
- http://www.eurosan1.ba/images/roblox-ninja-dojo-tycoon-cheats.pdfIn PDF document text
- http://www.eaapiaria.es/images/roblox-hack-for-change-music.pdfIn PDF document text
- http://egorplitka.ru/images/cheat-roblox-theme-park-tycoon.pdfIn PDF document text
- https://belixconstructions.com.au/images/hack-para-roblox-pc.pdfIn PDF document text
- http://w-i-r.de/images/roblox-meep-city-free-plus-hack.pdfIn PDF document text
- https://www.audev.com/images/how-to-buy-robux-free.pdfIn PDF document text
- http://androidthai.in.th/images/roblox-the-lords-of-nomrial-hack.pdfIn PDF document text
- https://www.u-pin-it.com/images/roblox-free-cam-script.pdfIn PDF document text
- https://waterpark.by:443/images/roblox-cheat-codes-for-money-2021.pdfIn PDF document text
- https://www.dierenartsberghman.be/images/how-robux-for-free.pdfIn PDF document text
- https://fkg.usu.ac.id/images/how-to-hack-roblox-btools.pdfIn PDF document text
- http://www.nielsen2u.dk/images/how-to-get-free-robux-with-0-robux.pdfIn PDF document text
- http://www.cosver.nl/images/hack-roblox-2021-espaol.pdfIn PDF document text
- http://gamixpaliwa.pl/images/t0pk3k-roblox-hack.pdfIn PDF document text
- https://www.hbproducts.dk/images/free-robux-gamekit.pdfIn PDF document text
- http://businessmart.ro/images/how-to-get-free-robux-easy-website.pdfIn PDF document text
- http://lawnn.ru/images/how-to-download-wall-hacks-on-roblox.pdfIn PDF document text
- http://biccairo.com/images/speed-hack-cheat-engine-roblox.pdfIn PDF document text
- http://echosvoix.ch/images/how-to-cheat-robux-in-roblox-2021.pdfIn PDF document text
- http://uctovnictvosnv.sk/images/roblox-when-i-make-game-it-say-free-sign.pdfIn PDF document text
- http://chartsmart.com.au/images/how-to-redeem-a-free-code-on-roblox.pdfIn PDF document text
- http://junktiquecollector.com/images/roblox-sonar-studios-dragon-adventures-cheats.pdfIn PDF document text
- https://tokunfome.com.br/images/boku-no-roblox-remastered-lv-up-hack.pdfIn PDF document text
- http://depelem.fr/images/how-to-hack-roblox-hospital-roleplay.pdfIn PDF document text
- http://www.studiodamato.it/images/get-free-robux-no-scam.pdfIn PDF document text
- http://alcomet.ru/images/free-roblox-hair-boy-rainbow.pdfIn PDF document text
- http://bit-sky.com/images/roblox-bots-free.pdfIn PDF document text
- http://smart-pro.co.uk/images/hack-roblox-co-no-verification.pdfIn PDF document text
- https://gaj.rs/images/how-do-u-hack-roblox-for-robux.pdfIn PDF document text
- http://svp-steinmaur.ch/images/games-free-download-roblox.pdfIn PDF document text
- http://www.friendshiptransport.net/images/roblox-free-stuff-2021.pdfIn PDF document text
- http://aiyta.com/images/comment-gagner-400-robux-sans-hack.pdfIn PDF document text
- http://elllanorestaurants.com/images/cheat-cloud-simulator-roblox.pdfIn PDF document text
+10 more URL(s)
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_003_off00008146.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x8146 | 25940 bytes |
SHA-256: f8eab3c3ce4e8b1462083dee9e2c75c1094e10e1ea90450da5bf6ce0ef72fd21 |
|||
font_01_sfnt_off0000bb92.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xBB92 | 19196 bytes |
SHA-256: f80190b8e465f61839fc585ddeab3b4af50d279193b30e0653b944c184061189 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.