MALICIOUS
140
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
T1204.002 User Execution: Malicious File
The PDF document contains a large number of links to external websites, many of which are related to game hacks and free in-game currency, specifically for Roblox. The heuristic firings indicate this is a link farm designed to lure users to scam sites. The document body reinforces this by listing numerous URLs that promise hacks and free items, suggesting a phishing or scam attempt.
Machine Learning
- Nyx PDF Classifier malicious score 0.6193
Heuristics 6
-
PDF carries distributed game-hack scam link farm critical PDF_GAME_HACK_SEO_LINK_FARMPDF contains a free-generator/game-hack lure together with many external PDF links spread across distinct hosts whose filenames advertise game hacks, cheats, jailbreaks, generators, or free currency. This is a high-confidence scam/SEO-poisoning carrier: the PDF exists to route users into malicious or unwanted download/redirect chains, not to present normal document content.
-
PDF carries game-hack generator link farm medium PDF_GAME_HACK_LINK_FARMPDF contains a gaminggenerator.org app lure together with multiple external PDF links whose filenames advertise game hacks, cheats, jailbreaks, or generators. This is a lure/delivery link farm rather than a PDF exploit: the risk is the linked redirection chain.
-
Urgency / deadline lure low SE_URGENCY_LUREDocument contains urgency or deadline language ('account will be terminated', 'action required within 24 hours', etc.) — useful context, but low-signal without other findings
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/free-pg PDF link annotation
- http://uptodate.az/images/robux-hack-2021-working.pdfIn PDF document text
- https://kimolos-link.gr/images/roblox-vehicul-simulator-hacke.pdfIn PDF document text
- https://www.cfdcnv.com/images/free-coloring-pages-roblox.pdfIn PDF document text
- https://www.u-pin-it.com/images/how-to-put-hacks-on-roblox.pdfIn PDF document text
- http://www.sanjosedeminas.gob.ec/images/earn-free-robux-rbx-blaster.pdfIn PDF document text
- http://www.malonmalon.com.ar/images/games-for-free-to-play-foenite-like-roblox.pdfIn PDF document text
- http://gingerscience.co.in/images/hoq-to-buy-anything-from-catalog-for-free-roblox.pdfIn PDF document text
- http://kovroff.com.ua/images/50-free-robux.pdfIn PDF document text
- http://cosver.eu/images/how-to-install-sandbags777s-eye-ball-hack-roblox.pdfIn PDF document text
- http://onlinemusicsolutions.com.au/images/roblox-hack-pastebin-all-games.pdfIn PDF document text
- http://cosver.eu/images/roblox-explorer-hack-2021.pdfIn PDF document text
- http://infoagronomia.com.ar/images/how-to-use-cheat-engine-on-roblox-swordburst-2.pdfIn PDF document text
- http://icomsolutions.com.au/images/free-robux-gift-card-codes-2021-no-human-verification.pdfIn PDF document text
- http://firstaidacademy.be/images/roblox-hack-2021-lev-7.pdfIn PDF document text
- http://optsuvenir.by/images/free-robux-no-verification-2021-ios.pdfIn PDF document text
- http://pia2000.net/images/robux-gratis-hack-pc.pdfIn PDF document text
- http://halitbayramoglu.com.tr/images/free-cafe-groups-on-roblox.pdfIn PDF document text
- https://socialvalue.gr/images/roblox-free-shirt-creator.pdfIn PDF document text
- http://pastelli.gr/images/free-shoulder-pet-roblox.pdfIn PDF document text
- http://linde-erbach.de/images/roblox-hack-2021-pastebin.pdfIn PDF document text
- http://legs11.co.za/images/roblox-dbz-rage-cheats.pdfIn PDF document text
- http://ivpr.net/images/how-to-hack-anyone-on-roblox.pdfIn PDF document text
- https://www.europap.cz/images/free-roblox-card-codes-july-2021.pdfIn PDF document text
- https://europainstitut.hu/images/synapse-x-roblox-download-free.pdfIn PDF document text
- https://www.cosmosdawn.net/images/free-roblox-giftcardd.pdfIn PDF document text
- http://eleveurs-autrement.fr/images/roblox-cheat-exploit-juillet-2021-for-vehicule-simulator.pdfIn PDF document text
- http://msfs-eastafrica.com/images/roblox-hack-scripts-jar.pdfIn PDF document text
- http://www.anies.eu/images/how-to-have-hacking-tool-in-roblox.pdfIn PDF document text
- http://kancelaria-legnica.eu/images/can-i-have-free-robux-please.pdfIn PDF document text
- http://svp-steinmaur.ch/images/free-robux-no-human-verification-2021-pc.pdfIn PDF document text
- https://corbo.ru/images/roblox-hack-website-easy.pdfIn PDF document text
- http://keepcasscountybeautiful.com/images/free-printable-valentines-day-cards-roblox.pdfIn PDF document text
- https://hbpbenin.com/images/how-to-get-free-backpack-in-roblox.pdfIn PDF document text
- http://facingachild.org/images/roblox-tycoon-simulator-walkspeed-script-hack.pdfIn PDF document text
- http://rafaelmontesinos.com/images/how-to-make-your-own-dominus-in-roblox-free.pdfIn PDF document text
- https://verdensbarn.no/images/roblox-police-car-free.pdfIn PDF document text
- https://www.arquetopia.org/images/roblox-jailbreak-hack-2021-download.pdfIn PDF document text
- https://gzog.pl/images/how-to-become-a-hacker-in-roblox-on-ipad.pdfIn PDF document text
- http://techmobil.pl/images/roblox-check-cashed-v5-lumber-tycoon-2-money-hack.pdfIn PDF document text
- https://www.devries-group.de/images/robux-gives-roblox-haks-free-roblox.pdfIn PDF document text
- http://www.fluidtech.hu/images/how-do-people-hack-roblox-accountsx.pdfIn PDF document text
- https://verdensbarn.no/images/free-tix-dominus-roblox.pdfIn PDF document text
- http://solidkom.ch/images/free-robux-codes-2021-september.pdfIn PDF document text
- http://axia-verlag.at/images/free-robux-tool.pdfIn PDF document text
- http://gods-own.org/images/hcbb-roblox-scripts-hack.pdfIn PDF document text
- http://behsanroshd.com/images/roblox-robux-hack-virus-free.pdfIn PDF document text
- http://dshikr.ru/images/how-to-get-free-robux-hack-easy.pdfIn PDF document text
- http://domaizdereva24.ru/images/which-cheat-engine-address-is-robux.pdfIn PDF document text
- https://heritagebanquethall.ca/images/wild-savannah-roblox-how-to-change-colours-hack.pdfIn PDF document text
+17 more URL(s)
Extracted artifacts 3
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_003_off000081d7.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x81D7 | 25556 bytes |
SHA-256: c73aca964d7a5f4d9fffd9266e1d9861d9b3392d748c35e7d75182ecdd12245d |
|||
font_01_sfnt_off0000bcbf.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xBCBF | 3884 bytes |
SHA-256: 40b61f8938bd710dc29dc58ba3fde91c245a6a69596ec569b4d27c769ca417cf |
|||
font_02_sfnt_off0000c966.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xC966 | 18596 bytes |
SHA-256: d4d7ef4e0d376b6f2c0b63abcffa8a0bb10729d94bab98057319cd1812fadca9 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.