MALICIOUS
132
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
The PDF file contains numerous links and document body text promoting game hacks and free in-game currency for Roblox. The heuristic firings indicate a link farm designed to lure users to scam websites. While no scripts were extracted, the embedded URLs and the nature of the content strongly suggest a phishing or scamming attack vector.
Machine Learning
- Nyx PDF Classifier malicious score 0.6193
Heuristics 5
-
PDF carries distributed game-hack scam link farm critical PDF_GAME_HACK_SEO_LINK_FARMPDF contains a free-generator/game-hack lure together with many external PDF links spread across distinct hosts whose filenames advertise game hacks, cheats, jailbreaks, generators, or free currency. This is a high-confidence scam/SEO-poisoning carrier: the PDF exists to route users into malicious or unwanted download/redirect chains, not to present normal document content.
-
PDF carries game-hack generator link farm medium PDF_GAME_HACK_LINK_FARMPDF contains a gaminggenerator.org app lure together with multiple external PDF links whose filenames advertise game hacks, cheats, jailbreaks, or generators. This is a lure/delivery link farm rather than a PDF exploit: the risk is the linked redirection chain.
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/how-to-hack-roblox-2021-no-human-verification PDF link annotation
- https://www.lavigny.ch/images/hacking-someones-roblox-account.pdfIn PDF document text
- http://britishcomics.com/images/legit-way-to-get-free-robux.pdfIn PDF document text
- http://www.jureclomas.com.ar/images/roblox-20-free.pdfIn PDF document text
- http://cristalysoptic.com/images/roblox-hacking-kqko.pdfIn PDF document text
- https://sdg-trade.com/images/roblox-pastebin-free-robux.pdfIn PDF document text
- https://technospektr.com.ua/images/green-lego-cats-free-robux.pdfIn PDF document text
- http://nevesomost.by/images/roblox-hack-strucid-aimbot-undetectable.pdfIn PDF document text
- http://www.maakherumusic.net/images/roblox-hack-day.pdfIn PDF document text
- http://www.marambio.com.ar/images/hacks-on-roblox-app.pdfIn PDF document text
- http://www.bois-ariegeois.fr/images/mobile-hacks-for-roblox.pdfIn PDF document text
- https://corbo.ru/images/copychat-hack-roblox.pdfIn PDF document text
- http://www.metinadistribuzione.com/images/roblox-hack-free-download.pdfIn PDF document text
- http://www.zdravazena.sk/images/roblox-gift-card-free-no-human-very-or-survey.pdfIn PDF document text
- http://internetdeputy.com/images/hack-for-roblox-jailbreak-download.pdfIn PDF document text
- https://septik-montag.ru/images/how-to-get-anything-free-on-roblox-2021.pdfIn PDF document text
- http://dialine.cz/images/roblox-hacker-beta.pdfIn PDF document text
- https://www.gymun.cz/images/roblox-hide-and-seek-free-online-game-for-kids.pdfIn PDF document text
- http://lillysonthelake.com/images/roblox-with-free-robux.pdfIn PDF document text
- https://www.dierenartsberghman.be/images/roblox-walls-hack.pdfIn PDF document text
- https://www.ncscolour.no/images/wwe-backpack-roblox-free.pdfIn PDF document text
- https://gabrieliassociati.com/images/free-robux-no-games-to-play.pdfIn PDF document text
- https://grovehilloutfitters.com/images/roblox-free-role-high.pdfIn PDF document text
- http://www.sanjosedeminas.gob.ec/images/how-to-get-free-robux-on-computer-2021.pdfIn PDF document text
- http://kids-academy.pl/images/como-hackear-a-un-usuario-de-roblox.pdfIn PDF document text
- http://hydroconseil.com/images/how-to-hack-kl2-on-roblox.pdfIn PDF document text
- http://biccairo.com/images/red-boy-roblox-jailbreak-hack.pdfIn PDF document text
- https://ballaratcaravans.com.au/images/roblox-police-free.pdfIn PDF document text
- http://eddegrootassurantien.nl/images/how-to-get-free-character-in-roblox.pdfIn PDF document text
- http://wireprod.net/images/roblox-hack-menu-jailbreak.pdfIn PDF document text
- http://babyxpress.de/images/how-can-i-get-a-roblox-hack-gui-to-work.pdfIn PDF document text
- http://biccairo.com/images/robux-cheats-for-roblox-app.pdfIn PDF document text
- http://learningarabic.co.uk/images/buy-free-robux-roblox-girl-skins.pdfIn PDF document text
- https://ogm-goettingen.de/images/hack-de-roblox-jailbreak-2021.pdfIn PDF document text
- http://kancelaria-legnica.eu/images/free-skin-code-for-roblox-strucid.pdfIn PDF document text
- http://abletrustcare.com/images/how-to-download-roblox-cheat-engine.pdfIn PDF document text
- https://technospektr.com.ua/images/roblox-hack-bid.pdfIn PDF document text
- http://unilin21.ru/images/free-shirts-that-look-pretty-on-roblox.pdfIn PDF document text
- http://teksomak.com/images/how-to-get-sea-star-for-free-roblox.pdfIn PDF document text
- http://uptodate.az/images/ap-get-free-robux-and-tips-for-roblox-2021.pdfIn PDF document text
- http://www.homesweethome.pl/images/hacking-galaxykittty2021-on-roblox.pdfIn PDF document text
- http://osteonad.com/images/play-roblox-on-google-for-free.pdfIn PDF document text
- http://www.rezbb.sk/images/hack-de-robux-2021.pdfIn PDF document text
- https://www.academiaanticorrupcion.org/images/how-to-get-hacks-for-flight-on-roblox-2021.pdfIn PDF document text
- http://olesya-chagovets.com/images/free-roblox-script-pack.pdfIn PDF document text
- https://www.ausecus.com/images/how-to-put-scripts-in-roblox-hack-in-your-game.pdfIn PDF document text
- https://www.coriglianocalabro.it/images/alone-battle-royale-hacks-roblox.pdfIn PDF document text
- http://pizzeria-rosso.pl/images/how-to-get-free-gamepasses-in-roblox.pdfIn PDF document text
- https://reggieslockandkey.com/images/free-roblox-gift-card-codes-not-used.pdfIn PDF document text
- http://mostowicz.pl/images/free-robux-on-youtube.pdfIn PDF document text
+13 more URL(s)
Extracted artifacts 3
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_003_off00008188.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x8188 | 26924 bytes |
SHA-256: c8dbc309a738f73fe5583c56549e15c1d708bc56f7be60df81a5387edac5e760 |
|||
font_01_sfnt_off0000bd78.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xBD78 | 3884 bytes |
SHA-256: 40b61f8938bd710dc29dc58ba3fde91c245a6a69596ec569b4d27c769ca417cf |
|||
font_02_sfnt_off0000ca1f.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xCA1F | 19200 bytes |
SHA-256: 6efa7c3631cb8a7990db7170e51366ecc5585ebf28b0711caf2c98438f46ccd0 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.