MALICIOUS
132
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
T1204.002 Malicious Link
The PDF file contains numerous links to websites that promise game hacks and virtual currency, such as 'roblox-mod-hack-robux'. These links are presented as lures, indicating a scam or phishing attempt. The ML classifier also flagged the document as malicious, supporting this assessment. No scripts were extracted, and the document body primarily consists of these scam-related URLs.
Machine Learning
- Nyx PDF Classifier malicious score 0.6193
Heuristics 5
-
PDF carries distributed game-hack scam link farm critical PDF_GAME_HACK_SEO_LINK_FARMPDF contains a free-generator/game-hack lure together with many external PDF links spread across distinct hosts whose filenames advertise game hacks, cheats, jailbreaks, generators, or free currency. This is a high-confidence scam/SEO-poisoning carrier: the PDF exists to route users into malicious or unwanted download/redirect chains, not to present normal document content.
-
PDF carries game-hack generator link farm medium PDF_GAME_HACK_LINK_FARMPDF contains a gaminggenerator.org app lure together with multiple external PDF links whose filenames advertise game hacks, cheats, jailbreaks, or generators. This is a lure/delivery link farm rather than a PDF exploit: the risk is the linked redirection chain.
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/roblox-mod-hack-robux PDF link annotation
- http://cosver.eu/images/cheat-codes-for-bick-cars-on-roblox.pdfIn PDF document text
- http://greasley.online/images/how-to-hack-using-roblox-client-flying.pdfIn PDF document text
- http://evro-okna.net/images/roblox-hack-v20-by-aatroxx2021.pdfIn PDF document text
- http://www.teapotjewelry.com/images/free-10-codes-for-roblox-no-human-verfication.pdfIn PDF document text
- http://www.ntc.edu.za/images/roblox-coolkid-hack.pdfIn PDF document text
- http://amtabor2.at/images/free-shirt-roblox-marmelllo.pdfIn PDF document text
- http://jasperfirstumc.com/images/play-games-to-get-free-robux.pdfIn PDF document text
- http://www.danzamaniapergine.it/images/roblox-is-it-a-hack-or-exploit.pdfIn PDF document text
- http://uptodate.az/images/how-to-hack-john-does-account-on-roblox.pdfIn PDF document text
- http://hemmet-strand.dk/images/adopt-me-roblox-getting-hacked.pdfIn PDF document text
- https://www.elevage-chiot.fr/images/roblox-arcane-adventures-hack-script.pdfIn PDF document text
- http://stackideas.com/images/free-roblox-accounts-v3rmillion.pdfIn PDF document text
- http://finettifrs.it/images/fre-chain-shirts-roblox.pdfIn PDF document text
- http://www.mediaxin.net/images/hack-de-velocidad-roblox-booga-booga.pdfIn PDF document text
- http://junktiquecollector.com/images/how-to-get-free-free-faces-on-roblox.pdfIn PDF document text
- http://www.vktzunami.cz/images/funcionando-nuevo-hack-roblox-jailbreak-phantom-forces-booga-booga.pdfIn PDF document text
- https://www.mvp.co.nz/images/how-to-get-free-robux-2021-december.pdfIn PDF document text
- https://www.eglihotel.gr/images/free-robux-without-human-veritfication.pdfIn PDF document text
- https://www.iadh.bi/images/how-to-hack-roblox-games-without-cheat-engine.pdfIn PDF document text
- http://ff-obertraun.at/images/free-roblox-high-school-2-promo-codes.pdfIn PDF document text
- http://jenne-technik.de/images/how-to-get-free-robux-no-verification-on-computer.pdfIn PDF document text
- http://kids-academy.pl/images/how-to-hack-roblox-accounts-v3rmillion.pdfIn PDF document text
- http://ns1.radiofacil.net/images/free-robux-generaters.pdfIn PDF document text
- http://bufbd.org/images/hack-server-roblox-script.pdfIn PDF document text
- http://xn--59-6kcusgqlmfgen3m.xn--p1ai/images/free-roblox-groups-with-funds-2021.pdfIn PDF document text
- http://legitame.org/images/how-to-hack-roblox-paintball-rank.pdfIn PDF document text
- https://www.ncscolour.no/images/de-robux-hack.pdfIn PDF document text
- http://dshikr.ru/images/roblox-themepark-tycoon-hacked.pdfIn PDF document text
- https://www.milewood.co.uk/images/auxs-roblox-hack-pack.pdfIn PDF document text
- http://www.domkiletniskowe-wladyslawowo.pl/images/free-robux-for-kids-hack.pdfIn PDF document text
- https://www.cfdcnv.com/images/build-a-boat-roblox-hack.pdfIn PDF document text
- http://rafaelmontesinos.com/images/roblox-hack-robux-infinitos.pdfIn PDF document text
- http://petarda.hu/images/free-robux-gg-codes-2021-october.pdfIn PDF document text
- https://reggieslockandkey.com/images/free-roblox-hack-sb2.pdfIn PDF document text
- http://solidcommunication.ch/images/how-to-hack-peoples-robux-on-roblox.pdfIn PDF document text
- http://sealysports.com/images/download-roblox-robux-hack-free.pdfIn PDF document text
- http://bkd1.balikpapan.go.id/images/cruise-ship-tycoon-money-cheat-roblox.pdfIn PDF document text
- http://www.eurosan1.ba/images/how-do-you-hack-roblox-robux.pdfIn PDF document text
- http://fm-express.de/images/how-to-play-roblox-for-free-without-downloading-it.pdfIn PDF document text
- http://pia2000.net/images/dll-hack-scripts-roblox-strucid.pdfIn PDF document text
- http://a1scan3d.com/images/play-roblox-on-google-for-free.pdfIn PDF document text
- http://lewishome.net/images/free-robux-real-working-2021-100.pdfIn PDF document text
- http://www.likto.eu/images/how-to-hack-into-someones-roblox-account-2021.pdfIn PDF document text
- http://www.sapaengineering.kz/images/roblox-jump-hack-phantom-forces.pdfIn PDF document text
- http://classicskitours.net/images/how-to-hack-stuff-on-roblox.pdfIn PDF document text
- http://lcs-schlieben.de/images/inject-hack-roblox-no-human-verification.pdfIn PDF document text
- http://almacargo.com/images/roblox-dino-cheat.pdfIn PDF document text
- http://forsazh-51.ru/images/nonsensediamond-roblox-hack.pdfIn PDF document text
- https://kimolos-link.gr/images/cool-looking-free-roblox-outfits.pdfIn PDF document text
+15 more URL(s)
Extracted artifacts 3
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_003_off000084a3.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x84A3 | 28160 bytes |
SHA-256: 38d0e5974a0b82e875466cec3cdf1f7c1bfa34d0797de55764eaa02caa886674 |
|||
font_01_sfnt_off0000c37d.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xC37D | 2844 bytes |
SHA-256: baad2f3f6808f4af03fa9398e38c580c8d846f7f773a947d8cc1f39b2753d31a |
|||
font_02_sfnt_off0000cd3e.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xCD3E | 17780 bytes |
SHA-256: 2b7cd4e71255c3f4faae953428f383fb61fe3f0595bc19898465e841cafe7f3c |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.