MALICIOUS
132
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
The PDF file contains a large number of embedded URLs and document body text that are part of a link farm, primarily focused on game hacking and cheats for Roblox. The heuristic firings indicate a critical finding related to a game-hack scam link farm, with numerous distinct hosts and lures. While no scripts were explicitly extracted, the nature of the content suggests a potential for JavaScript execution within the PDF to facilitate redirection or further malicious activity.
Machine Learning
- Nyx PDF Classifier malicious score 0.6193
Heuristics 5
-
PDF carries distributed game-hack scam link farm critical PDF_GAME_HACK_SEO_LINK_FARMPDF contains a free-generator/game-hack lure together with many external PDF links spread across distinct hosts whose filenames advertise game hacks, cheats, jailbreaks, generators, or free currency. This is a high-confidence scam/SEO-poisoning carrier: the PDF exists to route users into malicious or unwanted download/redirect chains, not to present normal document content.
-
PDF carries game-hack generator link farm medium PDF_GAME_HACK_LINK_FARMPDF contains a gaminggenerator.org app lure together with multiple external PDF links whose filenames advertise game hacks, cheats, jailbreaks, or generators. This is a lure/delivery link farm rather than a PDF exploit: the risk is the linked redirection chain.
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/comment-hacker-roblox-avec-cheat-enginer PDF link annotation
- http://soma.com.ua/images/roblox-cheats-for-robux-with-inspect-2021.pdfIn PDF document text
- http://briankellyforcongress.com/images/free-20-million-dollars-roblox.pdfIn PDF document text
- http://sscclc.edu.ec/images/free-robux-without-human-verification-on-ipad.pdfIn PDF document text
- https://www.air-shop.cz/images/how-to-get-clockwork-glasses-on-roblox-free.pdfIn PDF document text
- http://nosocomium.rv.ua/images/free-roblox-accounts-with-robux-pastebin.pdfIn PDF document text
- https://reggieslockandkey.com/images/free-roblox-hats-no-model.pdfIn PDF document text
- https://www.utalii.ac.ke/images/how-to-get-business-cat-in-roblox-for-free.pdfIn PDF document text
- http://webstan.be/images/hacks-for-roblox-parkour.pdfIn PDF document text
- http://svp-steinmaur.ch/images/banning-simulator-roblox-get-all-gamepasses-for-free.pdfIn PDF document text
- http://tecnodue.com/images/begone-nerds-roblox-hacking.pdfIn PDF document text
- http://axia-verlag.at/images/how-to-hack-a-server-on-roblox.pdfIn PDF document text
- http://agroturismoarkaia.com/images/can-you-use-cheat-engine-on-roblox-to-get-robux.pdfIn PDF document text
- http://uptodate.az/images/how-to-hack-in-roblox-prison-life-2021.pdfIn PDF document text
- http://echosvoix.ch/images/free-model-game-system-roblox.pdfIn PDF document text
- https://www.wildpark-johannismuehle.de/images/addmin-comands-in-roblox-hacking.pdfIn PDF document text
- http://pa-tanjungselor.go.id/images/roblox-games-with-no-anti-cheat.pdfIn PDF document text
- http://gestibrok.com/images/free-reusable-roblox-robux-codes.pdfIn PDF document text
- http://nevesomost.by/images/site-hack-roblox.pdfIn PDF document text
- http://www.sitiamministrabili.it/images/roblox-cheat-engine-hack-2021.pdfIn PDF document text
- http://subarulegacy.com/images/free-robux-service.pdfIn PDF document text
- http://sb2m.com.br/images/roblox-hack-ban-2021.pdfIn PDF document text
- http://w-i-r.de/images/roblox-robux-hack-tool-generator-lev-les.pdfIn PDF document text
- http://swibome.nl/images/roblox-coolkid-hack.pdfIn PDF document text
- http://getthelook-bkk.com/images/best-free-game-on-roblox.pdfIn PDF document text
- http://nalmpantistractors.gr/images/how-to-get-free-things-in-roblox.pdfIn PDF document text
- http://www.rezbb.sk/images/how-to-hack-computers-in-flee-the-facility-roblox.pdfIn PDF document text
- http://www.gearestauri.it/images/roblox-troll-players-script-hack.pdfIn PDF document text
- http://lv-siegen.de/images/free-robux-codes-new.pdfIn PDF document text
- http://s-punkt-objects.de/images/how-to-hack-roblox-no-downloads-2021.pdfIn PDF document text
- http://www.evaplast.by/images/roblox-free-robux-no-human-verification-2021.pdfIn PDF document text
- http://santjoandelesabadesses.cat/images/como-hackear-cuentas-de-roblox-sin-necesidad-de-contrasea.pdfIn PDF document text
- http://southernhills-golf.com/images/roblox-hack-top.pdfIn PDF document text
- http://www.remiauclair.fr/images/roblox-hack-tools-no-virus.pdfIn PDF document text
- https://www.eglihotel.gr/images/make-roblox-shirts-free.pdfIn PDF document text
- http://nevesomost.by/images/hack-roblox-exploit-wearedevs.pdfIn PDF document text
- https://centraltravel.com/images/wfb-roblox-hacker.pdfIn PDF document text
- https://www.cpnf.ch/images/how-to-hack-coins-in-reason-to-die-roblox.pdfIn PDF document text
- https://pemadamapi.net/images/diamond-hack-roblox.pdfIn PDF document text
- http://hondenspecialist-engelien.nl/images/roblox-hack-mobile-download.pdfIn PDF document text
- https://corbo.ru/images/roblox-star-wars-hack-v3rmillion.pdfIn PDF document text
- http://immo360grad.com/images/mediafire-hack-30-robux-gratis.pdfIn PDF document text
- http://ferienhaus-schmidl.at/images/roblox-high-school-cheat-codes.pdfIn PDF document text
- http://www.fanciullovito.it/images/400-robux-free.pdfIn PDF document text
- http://agrao.in/images/follow-people-in-roblox-hack.pdfIn PDF document text
- http://www.drent.se/images/hack-that-thing-free-robux.pdfIn PDF document text
- https://laconce.com/images/how-to-get-free-robux-no-survey-2021.pdfIn PDF document text
- https://gomsa.nl/images/free-robux-generator-really-works.pdfIn PDF document text
- http://demenagementlandry.com/images/how-to-get-free-robux-without-hacking-2021.pdfIn PDF document text
- http://www.cuniv-naama.dz/images/how-to-get-free-robux-using-pastebin-2021.pdfIn PDF document text
+16 more URL(s)
Extracted artifacts 3
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_003_off00008111.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x8111 | 26076 bytes |
SHA-256: 5c9871b2c0064938130497696ac4d98665f9a151425e75b3a051866aa96b4bdd |
|||
font_01_sfnt_off0000bca6.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xBCA6 | 3884 bytes |
SHA-256: 40b61f8938bd710dc29dc58ba3fde91c245a6a69596ec569b4d27c769ca417cf |
|||
font_02_sfnt_off0000c94d.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xC94D | 18768 bytes |
SHA-256: 399051d78b70bd406d7690d0e0704120d9681686389aff017f71dbc1b1a54c52 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.