Malicious PDF — malware analysis report

Heuristics 5

• PDF carries distributed game-hack scam link farm critical PDF_GAME_HACK_SEO_LINK_FARM
  PDF contains a free-generator/game-hack lure together with many external PDF links spread across distinct hosts whose filenames advertise game hacks, cheats, jailbreaks, generators, or free currency. This is a high-confidence scam/SEO-poisoning carrier: the PDF exists to route users into malicious or unwanted download/redirect chains, not to present normal document content.
• PDF carries game-hack generator link farm medium PDF_GAME_HACK_LINK_FARM
  PDF contains a gaminggenerator.org app lure together with multiple external PDF links whose filenames advertise game hacks, cheats, jailbreaks, or generators. This is a lure/delivery link farm rather than a PDF exploit: the risk is the linked redirection chain.
• Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTON
  Document contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
• External URI info PDF_URI
  PDF contains an external URL action
• Embedded URL info EMBEDDED_URL
  One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
  URL http://gaminggenerator.org/app/431946152/how-to-hack-someone-on-roblox PDF link annotation

  • http://linde-erbach.de/images/free-rainbow-wings-roblox.pdf%0AIn PDF document text
  • http://www.exikom.com.ua/images/how-to-hack-rank-up-in-a-roblox-group-easy.pdf%0AIn PDF document text
  • https://consorziocsa-asicaivano.it/images/free-bucks-roblox.pdf%0AIn PDF document text
  • http://www.copoint.co.uk/images/roblox-hack-for-life-in-paradise.pdf%0AIn PDF document text
  • http://sscclc.edu.ec/images/how-to-fix-cheat-engine-crashing-roblox.pdf%0AIn PDF document text
  • https://www.porthos.it/images/how-to-create-a-free-admin-game-in-roblox.pdf%0AIn PDF document text
  • http://energotestcontrol.ru/images/free-roblox-accounts-2021-v3rmillion.pdf%0AIn PDF document text
  • http://www.eurosan1.ba/images/how-to-hack-any-roblox-account-using-windows-command-prompt.pdf%0AIn PDF document text
  • http://domaizdereva24.ru/images/robloxnation-com-free-robux.pdf%0AIn PDF document text
  • http://www.ntc.edu.za/images/roblox-coolkid-hack.pdf%0AIn PDF document text
  • http://www.vktzunami.cz/images/aimbot-hacks-for-roblox-code.pdf%0AIn PDF document text
  • http://nevesomost.by/images/how-do-u-speed-hack-in-mm2-roblox.pdf%0AIn PDF document text
  • http://legs11.co.za/images/roblox-mad-city-hack-client.pdf%0AIn PDF document text
  • http://infoagronomia.com.ar/images/how-to-get-free-robux-august-2021.pdf%0AIn PDF document text
  • http://www.eurosan1.ba/images/free-roblox-shirt-file.pdf%0AIn PDF document text
  • https://www.inova-cuisine.fr/images/free-robux-code-for-roblox.pdf%0AIn PDF document text
  • http://cmme.it/images/free-roblox-account-with-dominus.pdf%0AIn PDF document text
  • https://www.mvp.co.nz/images/free-roblox-fe-scripts-pastebin-july-2021.pdf%0AIn PDF document text
  • https://www.milewood.co.uk/images/comment-avoir-un-mode-de-cheat-sur-roblox.pdf%0AIn PDF document text
  • https://accord.kiev.ua/images/roblox-free-exploit-that-support-fireclickdetector.pdf%0AIn PDF document text
  • http://zarinnameh.ir/images/free-accounts-on-roblox-discord.pdf%0AIn PDF document text
  • http://sbm-nn.ru/images/free-roblox-codes-march-2021.pdf%0AIn PDF document text
  • http://www.nielsen2u.dk/images/free-roblox-promo-codes-for-robux-2021.pdf%0AIn PDF document text
  • http://www.art-concept.gr/images/roblox-free-gamepass-script.pdf%0AIn PDF document text
  • http://svp-steinmaur.ch/images/admin-hack-roblox-ban.pdf%0AIn PDF document text
  • https://jdlgroup.ca/images/roblox-studio-how-to-add-music-for-free.pdf%0AIn PDF document text
  • https://www.lomrad.go.th/images/roblox-assassin-hack-2021.pdf%0AIn PDF document text
  • http://www.drent.se/images/como-usar-el-hack-de-roblox.pdf%0AIn PDF document text
  • https://www.abrapppe.org.br/images/roblox-shuts-down-with-cheat-engine.pdf%0AIn PDF document text
  • http://www.eurosan1.ba/images/download-roblox-hack-pc.pdf%0AIn PDF document text
  • http://en.wikipedia.org/wiki/MIT_LicenseIn extracted file (font_00_sfnt_off00003374.bin)

Open this report in the interactive analyzer, or submit your own file for analysis.