MALICIOUS
132
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
T1204.002 Malicious Link
The PDF contains numerous links to external websites that promote game hacks and free virtual currency, indicative of a scam or phishing operation. The heuristic PDF_GAME_HACK_SEO_LINK_FARM specifically identifies this as a link farm designed to lure users with promises of in-game advantages. The presence of a visual download button further supports the malicious intent to trick users into clicking malicious links.
Machine Learning
- Nyx PDF Classifier malicious score 0.7795
Heuristics 5
-
PDF carries distributed game-hack scam link farm critical PDF_GAME_HACK_SEO_LINK_FARMPDF contains a free-generator/game-hack lure together with many external PDF links spread across distinct hosts whose filenames advertise game hacks, cheats, jailbreaks, generators, or free currency. This is a high-confidence scam/SEO-poisoning carrier: the PDF exists to route users into malicious or unwanted download/redirect chains, not to present normal document content.
-
PDF carries game-hack generator link farm medium PDF_GAME_HACK_LINK_FARMPDF contains a gaminggenerator.org app lure together with multiple external PDF links whose filenames advertise game hacks, cheats, jailbreaks, or generators. This is a lure/delivery link farm rather than a PDF exploit: the risk is the linked redirection chain.
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/how-to-get-pants-for-free-on-roblox-without-bc PDF link annotation
- http://www.drent.se/images/free-robux-promo-codes-october-2021.pdfIn PDF document text
- http://www.lycee-langevin-wallon.com/images/hotel-empire-hack-roblox.pdfIn PDF document text
- http://linde-erbach.de/images/how-to-get-free-avatar-items-in-roblox.pdfIn PDF document text
- http://ptts.pl/images/free-roblox-giveaway.pdfIn PDF document text
- https://pemadamapi.net/images/free-roblox-phantom-forces-hack.pdfIn PDF document text
- http://www.boic.nl/images/best-hack-on-roblox.pdfIn PDF document text
- https://www.cfdcnv.com/images/como-hackear-juego-en-roblox.pdfIn PDF document text
- http://indotec.fr/images/roblox-hack-apk-android-1.pdfIn PDF document text
- https://roberto-gac.com/images/how-to-hack-musical-chairs-in-roblox.pdfIn PDF document text
- http://www.bernerpupping.at/images/how-to-get-your-a-dominas-for-free-on-roblox.pdfIn PDF document text
- https://gabrieliassociati.com/images/roblox-hack-robux-free-deutsch-download.pdfIn PDF document text
- https://www.hbproducts.dk/images/free-roblox-stat-changes-discord.pdfIn PDF document text
- http://schrichte.de/images/jailbreak-geld-cheaten-roblox.pdfIn PDF document text
- http://shapemybrows.id/images/how-to-hack-into-someones-account-on-roblox.pdfIn PDF document text
- http://lawpatron.ru/images/roblox-mm2-hack-script-2021.pdfIn PDF document text
- http://www.friendshiptransport.net/images/roblox-apk-robux-hack.pdfIn PDF document text
- http://androidthai.in.th/images/thanos-t-shirt-roblox-free.pdfIn PDF document text
- http://atelierweb.it/images/how-to-use-hacks-on-roblox-no-virus.pdfIn PDF document text
- http://www.sitiamministrabili.it/images/free-safe-roblox-injector-for-hacks.pdfIn PDF document text
- http://www.occquimica.com.br/images/antman-roblox-free.pdfIn PDF document text
- https://www.udivadlahotel.cz/images/roblox-retail-tycoon-cheat-engine.pdfIn PDF document text
- http://www.arredifunebri.com/images/free-robux-generator-tool.pdfIn PDF document text
- http://prohsa.com/images/groups-that-give-free-robux-roblox.pdfIn PDF document text
- http://cmme.it/images/granny-roblox-free-money.pdfIn PDF document text
- http://www.web.stc-part.co.th/images/robloxlover69-how-to-get-free-robux.pdfIn PDF document text
- http://www.malonmalon.com.ar/images/free-clothing-group-roblox.pdfIn PDF document text
- http://huananhai.net/images/free-online-roblox-robux-generator-no-human.pdfIn PDF document text
- http://ns1.radiofacil.net/images/free-robux-website-no-human-verification-2021.pdfIn PDF document text
- http://picuruta.com.br/images/jane-doe-roblox-hack.pdfIn PDF document text
- http://poltekkeskhjogja.ac.id/images/free-robux-generater-no-survety.pdfIn PDF document text
- https://sanjoseelectricians.net/images/how-to-get-free-packs-in-roblox.pdfIn PDF document text
- http://onlinemusicsolutions.com.au/images/hacks-for-roblox-o-survey.pdfIn PDF document text
- https://springhorn-reisen.de/images/noclip-hack-roblox-jailbreak-may2021.pdfIn PDF document text
- http://bibliotheque-perrigny-les-dijon.fr/images/https-www-roblox-com-free-robux.pdfIn PDF document text
- http://bwharrisalumniusa.org/images/free-robux-codes-2021-unused.pdfIn PDF document text
- http://stpc.it/images/bvb-kit-roblox-template-free.pdfIn PDF document text
- http://karolinaherrera.com/images/best-games-on-roblox-that-are-free.pdfIn PDF document text
- https://pneukalousek.cz/images/fidget-knot-free-robux.pdfIn PDF document text
- https://www.fubode.org/images/how-to-get-free-robux-dount-shop.pdfIn PDF document text
- https://zszolesno.pl/images/hacked-warning-roblox.pdfIn PDF document text
- https://www.sitiwebjoomla.it/images/trbx-site-free-robux.pdfIn PDF document text
- http://riccardodurso.it/images/free-online-coding-courses-for-kids-roblox.pdfIn PDF document text
- http://bertaluzorganiccosmetics.com/images/hack-roblox-with-lucky-patcher.pdfIn PDF document text
- http://axia-verlag.at/images/free-robux-no-verify-needed.pdfIn PDF document text
- http://nikabio.com/images/roblox-jailbreak-cheat-table.pdfIn PDF document text
- https://www.knxuk.org/images/command-for-free-robux.pdfIn PDF document text
- https://www.wadowice24.pl/images/roblox-lua-hack-scripts.pdfIn PDF document text
- http://cosver.eu/images/roblox-free-robux-generator.pdfIn PDF document text
- https://www.saisystem.it/images/hacker-usernames-for-roblox.pdfIn PDF document text
+13 more URL(s)
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_003_off00008313.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x8313 | 27308 bytes |
SHA-256: 7fe553b98c01d414721982b08b86d369323e5341f67af41041f63238f4884d20 |
|||
font_01_sfnt_off0000c258.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xC258 | 18948 bytes |
SHA-256: 63148da689d1445499c6b4b711cec3ea42781939d4274c76a36a6635a514cdf0 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.