MALICIOUS
102
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
T1059.007 JavaScript
The PDF document contains a large number of embedded URLs and text content that promote game hacks and free in-game currency for Roblox. The heuristic firings indicate this is a link farm designed to lure users to scam websites. The primary attack pattern involves tricking users into clicking these links, which is consistent with a phishing or scam lure.
Machine Learning
- Nyx PDF Classifier suspicious score 0.4342
Heuristics 5
-
PDF carries distributed game-hack scam link farm critical PDF_GAME_HACK_SEO_LINK_FARMPDF contains a free-generator/game-hack lure together with many external PDF links spread across distinct hosts whose filenames advertise game hacks, cheats, jailbreaks, generators, or free currency. This is a high-confidence scam/SEO-poisoning carrier: the PDF exists to route users into malicious or unwanted download/redirect chains, not to present normal document content.
-
PDF carries game-hack generator link farm medium PDF_GAME_HACK_LINK_FARMPDF contains a gaminggenerator.org app lure together with multiple external PDF links whose filenames advertise game hacks, cheats, jailbreaks, or generators. This is a lure/delivery link farm rather than a PDF exploit: the risk is the linked redirection chain.
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/www-robux-free-win PDF link annotation
- http://bapaecole.cm/images/elite-hacks-roblox.pdfIn PDF document text
- https://www.hotschool.com.au/images/free-limited-button-roblox.pdfIn PDF document text
- http://www.eaapiaria.es/images/how-to-hack-on-roblox-with-cheat-engine-64.pdfIn PDF document text
- http://domaizdereva24.ru/images/how-to-hack-roblox-on-chromebook.pdfIn PDF document text
- http://www.supercup.no/images/hacks-for-arsenal-roblox.pdfIn PDF document text
- http://www.rezbb.sk/images/roblox-tycoon-hack-2021.pdfIn PDF document text
- http://www.drent.se/images/roblox-hack-tools-no-virus.pdfIn PDF document text
- http://www.it-network.com.mx/images/how-to-hack-roblox-for-robux-on-phone.pdfIn PDF document text
- http://pa-tanjungselor.go.id/images/how-to-get-free-admin-on-roblox-2021.pdfIn PDF document text
- http://nosocomium.rv.ua/images/hacks-para-roblox-robux.pdfIn PDF document text
- http://www.pcclawyers.com.au/images/how-to-download-roblox-cheat.pdfIn PDF document text
- http://www.remiauclair.fr/images/como-hackear-cuentas-de-roblox-2021.pdfIn PDF document text
- https://socialvalue.gr/images/10-games-that-give-you-free-robux.pdfIn PDF document text
- http://lib.sssu.ru/images/how-to-get-free-cool-stuff-on-roblox.pdfIn PDF document text
- http://www.lycee-langevin-wallon.com/images/how-do-you-get-free-roblox-robux-on-roblox.pdfIn PDF document text
- http://www.sanjosedeminas.gob.ec/images/how-to-hack-roblox-acccounts-2021.pdfIn PDF document text
- https://www.beaufortcollege.ie/images/free-online-roblox-tycoons.pdfIn PDF document text
- http://tte.co.in/images/god-of-elements-roblox-element-hack.pdfIn PDF document text
- https://www.hotelaziza.com/images/free-idle-animation-roblox.pdfIn PDF document text
- http://www.nielsen2u.dk/images/free-robux-automatic-human-verification.pdfIn PDF document text
- https://www.siaeag.fr/images/roblox-what-to-do-when-hacked.pdfIn PDF document text
- http://www.tamogatoweb.hu/images/how-to-hack-free-roblox.pdfIn PDF document text
- http://ff-obertraun.at/images/how-do-you-get-free-roblox-clothes.pdfIn PDF document text
- https://www.hotelaziza.com/images/roblox-free-suit-not-default.pdfIn PDF document text
- https://corbo.ru/images/roblox-twisted-murderer-free-credits-givaway.pdfIn PDF document text
- http://gops.pruszczgdanski.pl/images/how-to-get-private-servers-free-without-robux-thumbnail.pdfIn PDF document text
- https://kimolos-link.gr/images/how-do-you-get-free-robux-2021-july.pdfIn PDF document text
- http://echosvoix.ch/images/get-free-roblox-on-roblox.pdfIn PDF document text
- http://www.kalaaliaraq.dk/images/8-bit-speed-hack-roblox.pdfIn PDF document text
- http://lax.co.in/images/roblox-adopt-me-money-hack-2021.pdfIn PDF document text
- https://amatq.ca/images/free-ebay-roblox-accounts.pdfIn PDF document text
- https://www.depsa.it/images/roblox-fly-hack-2021-download.pdfIn PDF document text
- http://poltekkeskhjogja.ac.id/images/roblox-how-to-get-a-free-vip-server.pdfIn PDF document text
- https://www.siaeag.fr/images/robloxcom-free-kkk-k-k-k-k-m-k.pdfIn PDF document text
- http://almidonesdesucre.com.co/images/roblox-avatar-the-last-airbender-cheats.pdfIn PDF document text
- http://nosocomium.rv.ua/images/roblox-hack-no-human-verification-no-download.pdfIn PDF document text
- https://www.facmedtananarive.org/images/how-to-get-free-robux-legit-2021.pdfIn PDF document text
- http://tsj-inform.ru/images/how-to-get-free-robux-xbox-one-2021.pdfIn PDF document text
- http://www.malonmalon.com.ar/images/free-codes-for-roblox-assassin.pdfIn PDF document text
- https://technospektr.com.ua/images/free-robux-easy-fast-ligit.pdfIn PDF document text
- http://almidonesdesucre.com.co/images/free-roblox-chat-bypass.pdfIn PDF document text
- http://nevesomost.by/images/how-to-get-stuff-for-free-roblox.pdfIn PDF document text
- http://www.exikom.com.ua/images/free-mixamo-roblox-charcter.pdfIn PDF document text
- http://www.anies.eu/images/how-to-get-free-robux-without-downloading-any-apps.pdfIn PDF document text
- http://serventuarios.org.br/images/free-robux-codes-november-2021.pdfIn PDF document text
- http://www.hawler.in/images/how-to-make-shirts-for-free-on-roblox.pdfIn PDF document text
- https://www.ncscolour.no/images/roblox-noob-costume-free.pdfIn PDF document text
- https://gk.kbr.ru/images/how-do-you-make-your-own-roblox-hack.pdfIn PDF document text
- http://www.malonmalon.com.ar/images/roblox-how-to-hack-a-perso.pdfIn PDF document text
+52 more URL(s)
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_005_off00008954.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x8954 | 23824 bytes |
SHA-256: 10e6f690735aa5ff501877cd8208598db7efda3a3c05daa6915b3fc15d029d13 |
|||
font_01_sfnt_off0000bfbe.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xBFBE | 17892 bytes |
SHA-256: ad43746ec7db5b4889e3e4311089b1340b15cbdf1983498ce952abec2e0e3dea |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.