SUSPICIOUS
42
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
This PDF document was flagged as suspicious by an ML classifier. The file presents a deceptive download button. Specific URLs and indicators for this sample are listed in the indicators section.
Machine Learning
- Nyx PDF Classifier malicious score 0.9723
Heuristics 3
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/how-do-you-play-roblox-for-free PDF link annotation
- http://ghhs.com.my/images/roblox-t-shirt-maker-free.pdfIn PDF document text
- http://www.sapaengineering.kz/images/case-clicker-cheats-roblox-2021.pdfIn PDF document text
- http://killebergsridsport.se/images/free-online-roblox-play.pdfIn PDF document text
- http://subarulegacy.com/images/how-to-get-lots-of-robux-on-roblox-for-free.pdfIn PDF document text
- http://arthakranti.org/images/how-to-hack-roblox-accaunt.pdfIn PDF document text
- http://the-specials.ch/images/was-roblox-hacked-2021.pdfIn PDF document text
- http://dermatologos-thessaloniki.gr/images/roblox-bee-hive-simulator-how-to-get-a-free-egg.pdfIn PDF document text
- https://gzog.pl/images/hacks-on-roblox-prison-life.pdfIn PDF document text
- http://www.hotelcomelico.it/images/animate-a-roblox-character-online-free.pdfIn PDF document text
- http://goosesscuba.com/images/get-free-robux-download.pdfIn PDF document text
- http://technologicalsc.com/images/roblox-cheat-engine-robux-hack-2021.pdfIn PDF document text
- http://atelierweb.it/images/free-builders-culb-roblox-trial.pdfIn PDF document text
- http://szekelymozes.ro/images/roblox-phantom-forces-hack-deutsch.pdfIn PDF document text
- http://rose-mari.com.ua/images/snack-factory-tycoon-roblox-hack-script.pdfIn PDF document text
- http://svp-steinmaur.ch/images/how-to-free-robux-on-roblox.pdfIn PDF document text
- http://safetin.ru/images/hacks-fr-roblox-phantom-forces.pdfIn PDF document text
- https://www.milewood.co.uk/images/robux-help-com-to-earn-free-25k-robux.pdfIn PDF document text
- http://www.peterdejonge.nl/images/mega-roblox-cheat.pdfIn PDF document text
- http://jackson-pr.com/images/roblox-hack-999999-robux-pc-2021-august.pdfIn PDF document text
- http://acp-institut.fr/images/roblox-card-code-generator-download-free.pdfIn PDF document text
- http://kim-kinder-im-mittelpunkt.de/images/free-robux-kids-hack.pdfIn PDF document text
- http://www.lycee-langevin-wallon.com/images/roblox-commands-hack-2021.pdfIn PDF document text
- http://clinicadentalvilaplana.es/images/how-to-get-a-free-face-roblox.pdfIn PDF document text
- http://www.anies.eu/images/roblox-lumber-tycoon-2-hack-script.pdfIn PDF document text
- http://pdapanache.com/images/hacks-para-arsenal-roblox-tampermonkey.pdfIn PDF document text
- http://hindicenter.com/images/download-roblox-free-windows-xp.pdfIn PDF document text
- https://hassel-event.de/images/hack-roblox-robux-without-playing-games.pdfIn PDF document text
- http://www.pleiadisrl.it/images/how-to-make-everything-on-roblox-free.pdfIn PDF document text
- https://icefuture.ru/images/roblox-free-radio-games.pdfIn PDF document text
- http://arch-centr.ru/images/free-roblox-accounts-counter-blox.pdfIn PDF document text
- http://en.wikipedia.org/wiki/MIT_LicenseIn PDF document text
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
font_00_sfnt_off00003e1e.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x3E1E | 20132 bytes |
SHA-256: 7f5a708860df5296a1ead15f359ff17daca40ca4c319e46f46639ce90358902a |
|||
font_01_sfnt_off00006832.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x6832 | 18376 bytes |
SHA-256: d69a56c2f3c24e4c1e62c87702e802d36fc914dd9021a1cd3337985d4aa93f9f |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.