MALICIOUS
82
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
T1203 Exploitation for Client Execution
The document presents a fake CAPTCHA to trick the user into clicking a link, which is a common social engineering tactic. The embedded URL, https://netcdn.xyz/app/431946152/free-roblox-hacks-money-game-hack, likely leads to a payload download. The ML classifier also flagged this PDF as malicious with high confidence.
Machine Learning
- Nyx PDF Classifier malicious score 0.9832
Heuristics 4
-
Fake CAPTCHA / human verification prompt high SE_FAKE_CAPTCHADocument displays a fake CAPTCHA or human-verification prompt — used to trick users into running commands or pressing keyboard shortcuts
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL https://netcdn.xyz/app/431946152/free-roblox-hacks-money-game-hack
- https://2020.innscidsp.com/wp-content/uploads/fsqm-files/free-roblox-redeem-codes-generator_GM431946152.pdf
- https://2020.innscidsp.com/wp-content/uploads/fsqm-files/robux-redeem-codes-free_GM431946152.pdf
- https://2020.innscidsp.com/wp-content/uploads/fsqm-files/free-robux-no-download_GM431946152.pdf
- https://2020.innscidsp.com/wp-content/uploads/fsqm-files/como-ser-un-hacker-en-roblox_GM431946152.pdf
- https://2020.innscidsp.com/wp-content/uploads/fsqm-files/how-to-get-free-robux-no-hack-no-scam_GM431946152.pdf
- https://2020.innscidsp.com/wp-content/uploads/fsqm-files/minecraft-java-edition-code-free_GM479516143.pdf
- https://2020.innscidsp.com/wp-content/uploads/fsqm-files/robux-hack-generator_GM431946152.pdf
- https://2020.innscidsp.com/wp-content/uploads/fsqm-files/hot-to-cheat-roblox_GM431946152.pdf
- https://2020.innscidsp.com/wp-content/uploads/fsqm-files/roblox-hack-download-for-game-card-code-generator_GM431946152.pdf
- https://2020.innscidsp.com/wp-content/uploads/fsqm-files/roblox-robux-hack-2021-october_GM431946152.pdf
- https://2020.innscidsp.com/wp-content/uploads/fsqm-files/hacking-progam-roblox_GM431946152.pdf
- https://2020.innscidsp.com/wp-content/uploads/fsqm-files/free-minecraft-mods_GM479516143.pdf
- https://2020.innscidsp.com/wp-content/uploads/fsqm-files/bug-free-uniform-of-roblox_GM431946152.pdf
- https://2020.innscidsp.com/wp-content/uploads/fsqm-files/roblox-code-on-how-to-get-clothes-for-free_GM431946152.pdf
- https://2020.innscidsp.com/wp-content/uploads/fsqm-files/roblox-troll-players-inject-script-hack-pastebin_GM431946152.pdf
- https://2020.innscidsp.com/wp-content/uploads/fsqm-files/free-tiktok-accounts-with-followers_GM835599320.pdf
- https://2020.innscidsp.com/wp-content/uploads/fsqm-files/free-minecraft-skins_GM479516143.pdf
- https://2020.innscidsp.com/wp-content/uploads/fsqm-files/roblox-steve-one-piece-hack-tp-chest_GM431946152.pdf
- https://2020.innscidsp.com/wp-content/uploads/fsqm-files/youtube-roblox-how-to-get-a-free-dominus_GM431946152.pdf
- https://2020.innscidsp.com/wp-content/uploads/fsqm-files/minecraft-games-free-download_GM479516143.pdf
- http://en.wikipedia.org/wiki/MIT_License
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_004_off00005315.bine74fdd0b4711e7ce49b0da483fb37f71fa99ebf5382271b3249a58a04880036d |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x5315 | 28388 bytes |
font_01_sfnt_off000092f6.bin495fabfb7956c589c7f791f91e274fd4855e6f3e3b6a2cc4c267fdb29d201c4d |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x92F6 | 18720 bytes |
Open this report in the interactive analyzer, or submit your own file for analysis.