SUSPICIOUS
42
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
T1204.002 Malicious Link
The PDF document contains an embedded URI pointing to a website that offers game hacking tools. The ML classifier flagged this PDF as malicious, and the presence of a download-related button further supports a malicious intent. The document's content and the external URL suggest a lure to download potentially unwanted or malicious software.
Machine Learning
- Nyx PDF Classifier malicious score 0.6193
Heuristics 3
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/how-to-use-cheat-engine-6.7-in-roblox PDF link annotation
- https://pa-waingapu.go.id/images/como-hackear-un-usuario-en-roblox.pdfIn PDF document text
- https://www.sitiwebjoomla.it/images/roblox-exploit-download-free.pdfIn PDF document text
- https://www.lomrad.go.th/images/roblox-admin-robux-hack.pdfIn PDF document text
- http://prodent.com.ua/images/roblox-phantom-forces-aimbot-hack.pdfIn PDF document text
- https://socialvalue.gr/images/free-robux-generator-website.pdfIn PDF document text
- http://www.marambio.com.ar/images/roblox-cheat-scripts.pdfIn PDF document text
- https://omhelsjehart.nu/images/hack-shrek-roblox.pdfIn PDF document text
- http://bit-sky.com/images/free-robux-no-human-verification-no-offers-generator.pdfIn PDF document text
- http://medicalafrica.net/images/roblox-bubblegum-simulator-cheats-2021.pdfIn PDF document text
- https://technospektr.com.ua/images/free-robux-easy-fast-ligit.pdfIn PDF document text
- http://jobsy.com.sg/images/noclip-hack-on-roblox.pdfIn PDF document text
- https://www.romedia.gr/images/how-to-get-free-robux-no-verification-on-computer.pdfIn PDF document text
- https://kunstmalen.ch/images/can-you-use-cheat-engine-for-robux.pdfIn PDF document text
- https://www.europap.cz/images/free-falling-roblox-id.pdfIn PDF document text
- http://rafaelmontesinos.com/images/free-robux-hack-2021-no-verification.pdfIn PDF document text
- http://www.copoint.co.uk/images/i-was-hacked-on-roblox.pdfIn PDF document text
- http://www.marambio.com.ar/images/how-to-get-free-gear-on-roblox-2021.pdfIn PDF document text
- http://miriammcconnonart.com/images/hack-homestread-roblox.pdfIn PDF document text
- http://kfz-service-etp.de/images/roblox-vip-server-hack.pdfIn PDF document text
- https://www.apartmanychorvatsko24.cz/images/how-to-get-a-free-dominus-hat-on-roblox.pdfIn PDF document text
- http://zibai.eu/images/download-free-robux-hack-for-free.pdfIn PDF document text
- http://icomsolutions.com.au/images/hack-para-robux-real.pdfIn PDF document text
- http://jaeger-bauplanung.de/images/hacking-my-brothers-roblox-acaawaant.pdfIn PDF document text
- http://www.thecoffeebaron.co.za/images/how-to-get-free-robux-on-ipad-or-phone.pdfIn PDF document text
- http://www.equistop.it/images/roblox-free-outfits-boy.pdfIn PDF document text
- https://fkg.usu.ac.id/images/is-roblox-free-on-computer.pdfIn PDF document text
- http://adues.org/images/map-for-free-robux.pdfIn PDF document text
- https://verdensbarn.no/images/how-to-use-hacking-scripts-on-roblox.pdfIn PDF document text
- http://arcnjournals.org/images/spiderman-stuff-on-roblox-free.pdfIn PDF document text
- http://www.teapotjewelry.com/images/2021-free-promo-codes-robloxyoutube.pdfIn PDF document text
- http://ff-obertraun.at/images/sex-in-roblox-hack.pdfIn PDF document text
- http://gestibrok.com/images/como-hackear-en-roblox.pdfIn PDF document text
- http://www.awakeningtruth.org/images/how-to-hack-on-roblox-accounts.pdfIn PDF document text
- http://www.drent.se/images/roblox-dragon-ball-z-final-stand-cheat-engine.pdfIn PDF document text
- https://verdensbarn.no/images/roblox-guest-shirt-free-2021.pdfIn PDF document text
- https://www.wildpark-johannismuehle.de/images/how-to-get-codes-detector-robux-free.pdfIn PDF document text
- http://sscclc.edu.ec/images/hacker-roblox-robux.pdfIn PDF document text
- https://corbo.ru/images/how-to-make-an-item-free-on-roblox.pdfIn PDF document text
- https://consorziocsa-asicaivano.it/images/free-gamepasses-roblox-v3rm.pdfIn PDF document text
- http://www.web.stc-part.co.th/images/free-roblox-gift-card-codes-2021-no-human-verification.pdfIn PDF document text
- http://www.sapaengineering.kz/images/xxlolaplaysxd-free-robux-help.pdfIn PDF document text
- http://stackideas.com/images/how-to-become-a-hacker-in-roblox.pdfIn PDF document text
- http://altc.de/images/code-2021-robux-free-daily.pdfIn PDF document text
- http://finalstand.org/images/wwwrobux-cheat-us-unlimited.pdfIn PDF document text
- https://www.saisystem.it/images/get-free-robux-without-human-verification-2021.pdfIn PDF document text
- http://condit-pack.com/images/cbro-roblox-hacks-for-credits.pdfIn PDF document text
- http://sdsdar.org/images/roblox-free-body-parts.pdfIn PDF document text
- https://gomsa.nl/images/a-free-robux-gift-card-number.pdfIn PDF document text
- http://bkd1.balikpapan.go.id/images/roblox-what-is-e-free.pdfIn PDF document text
+15 more URL(s)
Extracted artifacts 3
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
font_00_sfnt_off00007fb9.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x7FB9 | 27004 bytes |
SHA-256: 9c6e38d966f48e7b5b18ea15c936a34c87e8bb262317b64fbc1729b1f592f4ac |
|||
font_01_sfnt_off0000bc4b.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xBC4B | 3884 bytes |
SHA-256: 40b61f8938bd710dc29dc58ba3fde91c245a6a69596ec569b4d27c769ca417cf |
|||
font_02_sfnt_off0000c8f2.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xC8F2 | 18760 bytes |
SHA-256: c81eaa4c190c9ced828ddf2e417eb06348f23dd06fdd2ec69eca0b325629c845 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.