SUSPICIOUS
42
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
This PDF document was flagged as suspicious by an ML classifier. The file presents a deceptive download button. Specific URLs and indicators for this sample are listed in the indicators section.
Machine Learning
- Nyx PDF Classifier malicious score 0.9434
Heuristics 3
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/how-to-get-speed-hacks-in-roblox-jailbreak PDF link annotation
- http://escolaarboc.cat/images/free-robux-legal-easy-and-fast.pdfIn PDF document text
- https://sitam.co.in/images/can-you-use-cheat-engine-on-roblox.pdfIn PDF document text
- http://www.rezbb.sk/images/rbx-points-get-free-robux-points.pdfIn PDF document text
- https://www.ghknights.org/images/easy-free-robux-no-human-verification.pdfIn PDF document text
- http://bkd1.balikpapan.go.id/images/roblox-champl-dll-hack.pdfIn PDF document text
- http://www.mjclautrec.fr/images/roblox-birthday-invitation-free.pdfIn PDF document text
- http://salantiskis.lt/images/roblox-bloxburg-free-100k.pdfIn PDF document text
- http://gops.pruszczgdanski.pl/images/john-doe-roblox-hacking.pdfIn PDF document text
- http://uptodate.az/images/free-military-costume-roblox.pdfIn PDF document text
- https://www.eglihotel.gr/images/free-roblox-gift-card-codes-2021-live.pdfIn PDF document text
- https://eddar.fr/images/free-robux-no-verifacation-or-scam-mobile.pdfIn PDF document text
- https://socialvalue.gr/images/como-usar-pastbin-no-roblox-hack.pdfIn PDF document text
- https://esl.ipb.ac.id/images/roblox-hack-robux-hack.pdfIn PDF document text
- https://www.beaufortcollege.ie/images/update-roblox-free.pdfIn PDF document text
- https://www.milewood.co.uk/images/roblox-break-free.pdfIn PDF document text
- http://escolaarboc.cat/images/roblox-free-group-uniform.pdfIn PDF document text
- http://poltekkeskhjogja.ac.id/images/my-avatar-roblox-free.pdfIn PDF document text
- https://estalagemmonteverde.com.br/images/free-robux-codes-com.pdfIn PDF document text
- http://www.kalaaliaraq.dk/images/roblox-font-generator-free.pdfIn PDF document text
- https://verdensbarn.no/images/how-to-hack-prison-life-roblox.pdfIn PDF document text
- https://technospektr.com.ua/images/roblox-jailbreak-how-to-get-vip-for-free.pdfIn PDF document text
- http://www.exikom.com.ua/images/free-robux-xyz.pdfIn PDF document text
- https://www.fhccu.com/images/free-roblox-codes-toys.pdfIn PDF document text
- http://www.eurosan1.ba/images/fotos-de-hacker-en-roblox.pdfIn PDF document text
- https://www.u-pin-it.com/images/marshmello-t-shirt-roblox-free.pdfIn PDF document text
- https://consorziocsa-asicaivano.it/images/hack-roblox-exploit.pdfIn PDF document text
- https://www.romedia.gr/images/spider-cola-roblox-free.pdfIn PDF document text
- http://www.brtes.com/images/roblox-vehicle-simulator-how-to-get-free-cars.pdfIn PDF document text
- http://www.drent.se/images/roblox-sand-simulator-hack-for-android-2021.pdfIn PDF document text
- https://verdensbarn.no/images/robux-hack-generator-com.pdfIn PDF document text
- http://www.cosver.nl/images/roblox-plus-ultra-hack.pdfIn PDF document text
- https://tokunfome.com.br/images/auto-speed-hack-legends-of-speed-roblox.pdfIn PDF document text
- https://www.osoc.com/images/roblox-inspect-element-console-hack.pdfIn PDF document text
- https://gomsa.nl/images/which-games-on-roblox-you-should-fly-hack-in.pdfIn PDF document text
- http://www.kalaaliaraq.dk/images/roblox-booga-booga-spee-hack.pdfIn PDF document text
- http://www.lionel-seppoloni.fr/images/how-to-get-free-roblox-items-2021.pdfIn PDF document text
- http://bilhetim.com.br/images/where-to-find-roblox-hacks.pdfIn PDF document text
- http://www.awakeningtruth.org/images/roblox-script-executor-free-2021.pdfIn PDF document text
- https://ballaratcaravans.com.au/images/get-robux-free-2021.pdfIn PDF document text
- http://hemmet-strand.dk/images/free-robux-codes-2021.pdfIn PDF document text
- https://estalagemmonteverde.com.br/images/free-makeu-base-roblox.pdfIn PDF document text
- https://accord.kiev.ua/images/free-fedora-roblox-promo-codes.pdfIn PDF document text
- https://www.osoc.com/images/how-to-hack-roblox-accounts-december-2021.pdfIn PDF document text
- https://www.porthos.it/images/stella-beta-roblox-hack-download.pdfIn PDF document text
- https://www.u-pin-it.com/images/how-to-hack-roblox-high-school.pdfIn PDF document text
- https://amatq.ca/images/irobux-fun-robux-hack.pdfIn PDF document text
- https://www.air-shop.cz/images/lua-script-roblox-hack.pdfIn PDF document text
- https://ballaratcaravans.com.au/images/get-your-free-tvs-roblox.pdfIn PDF document text
- https://sitam.co.in/images/get-old-roblox-free.pdfIn PDF document text
+2 more URL(s)
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
font_00_sfnt_off0000563e.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x563E | 22828 bytes |
SHA-256: 2c1c70850cd2f73b8727398dcc0cb23841c896eb5f04c84c3c6257258a4c430c |
|||
font_01_sfnt_off00008976.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x8976 | 18812 bytes |
SHA-256: ca05fb529e6d9ba336107064a31c1df17b2905c4e23deab72a505d0772767527 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.