SUSPICIOUS
42
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
T1059.007 JavaScript
This PDF document was flagged as suspicious by an ML classifier. The file presents a deceptive download button. Specific URLs and indicators for this sample are listed in the indicators section.
Machine Learning
- Nyx PDF Classifier malicious score 0.7795
Heuristics 3
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/adopte-me-hack-project-alpha-3.0.0-roblox PDF link annotation
- https://corbo.ru/images/inspect-element-hacks-for-roblox.pdfIn PDF document text
- http://villazeus.eu/images/how-to-get-a-free-dragon-on-adopt-me-roblox.pdfIn PDF document text
- http://akademiatenisa.org/images/comment-cheater-sur-roblox-relail-ticoon.pdfIn PDF document text
- https://sanjoseelectricians.net/images/monaco-base-roblox-hack.pdfIn PDF document text
- http://www.kalaaliaraq.dk/images/app-for-free-robux.pdfIn PDF document text
- http://www.jureclomas.com.ar/images/free-robux-game-no-password.pdfIn PDF document text
- http://artindex.pro/images/free-blue-hair-in-roblox.pdfIn PDF document text
- http://uctovnictvosnv.sk/images/3-games-that-promise-free-robux.pdfIn PDF document text
- https://www.utalii.ac.ke/images/roblox-hack-robux-2021-apk.pdfIn PDF document text
- https://www.romedia.gr/images/hack-level-zombie-rush-roblox.pdfIn PDF document text
- http://www.ntc.edu.za/images/real-robux-hack-no-survey-2021-febuary.pdfIn PDF document text
- https://www.saisystem.it/images/awesome-free-roblox-outfits.pdfIn PDF document text
- https://ballaratcaravans.com.au/images/how-to-look-cool-for-free-in-roblox.pdfIn PDF document text
- http://chartsmart.com.au/images/roblox-hackings-2021.pdfIn PDF document text
- http://goldwing-shop.ru/images/hack-pac-man-roblox.pdfIn PDF document text
- http://leigraphics.com/images/youtube-free-robux-scam.pdfIn PDF document text
- https://bgescc.com/images/dinosaur-simulator-in-roblox-hack-glitch-for-dna.pdfIn PDF document text
- https://www.shin.ge/images/get-free-promo-codes-roblox.pdfIn PDF document text
- https://koeltotaal.com/images/how-to-make-a-robux-hack-code.pdfIn PDF document text
- http://www.fluidtech.hu/images/roblox-cheat-download-no-survey.pdfIn PDF document text
- http://badboybiteaway.de/images/how-to-get-free-robux-october-2021.pdfIn PDF document text
- https://www.sitiwebjoomla.it/images/los-mejores-hacks-para-roblox.pdfIn PDF document text
- https://www.elevage-chiot.fr/images/how-to-get-free-hair-on-roblox-on-phone.pdfIn PDF document text
- http://www.nielsen2u.dk/images/hack-for-roblox-exploit.pdfIn PDF document text
- http://acktivities.com/images/how-to-speed-hack-in-roblox-mm2.pdfIn PDF document text
- http://reisebild.eu/images/free-roblox-account-names.pdfIn PDF document text
- http://fm-express.de/images/robux-hack-revealed.pdfIn PDF document text
- https://www.cnte.org.br/images/robux-hack-no-verification-no-download.pdfIn PDF document text
- http://techmobil.pl/images/how-to-hack-roblox-without-downloading-any-apps.pdfIn PDF document text
- https://wandpiraten.de/images/how-to-make-t-shirts-free-on-roblox.pdfIn PDF document text
- http://www.agri-tech.com.au/images/roblox-apk-robux-hack.pdfIn PDF document text
- http://marcopolosydney.com.au/images/free-robux-app-com.pdfIn PDF document text
- http://axia-verlag.at/images/roblox-speed-and-jump-hack.pdfIn PDF document text
- https://www.eglihotel.gr/images/roblox-speed-hack-mega.pdfIn PDF document text
- https://www.tsdb.com.au/images/crib-roblox-hacks.pdfIn PDF document text
- http://www.malonmalon.com.ar/images/free-roblox-cosmetics.pdfIn PDF document text
- https://www.fhccu.com/images/cheats-for-roblox-retail-tycoon.pdfIn PDF document text
- https://www.mrsz.ir/images/how-to-change-roblox-username-for-free-2021.pdfIn PDF document text
- http://www.bois-ariegeois.fr/images/roblox-roman-belgica-youtube-hack.pdfIn PDF document text
- http://www.evaplast.by/images/hack-free-robux-no-human-verification.pdfIn PDF document text
- https://osk-sibir.ru/images/change-roblox-name-free.pdfIn PDF document text
- http://kids-academy.pl/images/cheat-engine-roblox-robux-hack-2021.pdfIn PDF document text
- http://africadaily.co.za/images/html-free-robux-hack.pdfIn PDF document text
- http://brandyourbody.com/images/free-robux-2021-no-scam.pdfIn PDF document text
- http://www.awakeningtruth.org/images/download-roblox-hack-robux-pc.pdfIn PDF document text
- https://amatq.ca/images/big-brother-roblox-exploits-free-download.pdfIn PDF document text
- http://www.fluidtech.hu/images/free-printable-roblox-invitations.pdfIn PDF document text
- http://apcupschennai.com/images/roblox-hacked-smile.pdfIn PDF document text
- http://www.mosaikshop.at/images/roblox-hack-unlimited-robux-and-tickets-roblox-facebook.pdfIn PDF document text
+11 more URL(s)
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_003_off00007e97.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x7E97 | 24896 bytes |
SHA-256: f7f675da9baefbe043b03163b6e0d650b59f4205c74cb8d6e45c09f15b6537a3 |
|||
font_01_sfnt_off0000b7e3.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xB7E3 | 19124 bytes |
SHA-256: 6a0f09145539018fa20ff7f616ee77fd66de7c8aa917c81dcbbcc3f6ef4172c0 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.