MALICIOUS
132
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
The PDF contains numerous links to external websites that promise free Robux or game hacks, indicating a scam or phishing attempt. The heuristic firings, particularly 'PDF_GAME_HACK_SEO_LINK_FARM', strongly suggest this is a link farm designed to lure users to potentially malicious sites. While no scripts were extracted, the document body and embedded URLs are the primary indicators of malicious intent.
Machine Learning
- Nyx PDF Classifier malicious score 0.7795
Heuristics 5
-
PDF carries distributed game-hack scam link farm critical PDF_GAME_HACK_SEO_LINK_FARMPDF contains a free-generator/game-hack lure together with many external PDF links spread across distinct hosts whose filenames advertise game hacks, cheats, jailbreaks, generators, or free currency. This is a high-confidence scam/SEO-poisoning carrier: the PDF exists to route users into malicious or unwanted download/redirect chains, not to present normal document content.
-
PDF carries game-hack generator link farm medium PDF_GAME_HACK_LINK_FARMPDF contains a gaminggenerator.org app lure together with multiple external PDF links whose filenames advertise game hacks, cheats, jailbreaks, or generators. This is a lure/delivery link farm rather than a PDF exploit: the risk is the linked redirection chain.
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/how-to-cheat-roblox-jailbreak PDF link annotation
- http://immo360grad.com/images/roblox-how-to-buy-the-gamepass-for-free.pdfIn PDF document text
- http://bilhetim.com.br/images/free-robux-service.pdfIn PDF document text
- http://pandaplast.com/images/free-roblox-headphone.pdfIn PDF document text
- https://www.audipec.com.br/images/robux-hack-no-verification-needed.pdfIn PDF document text
- http://kovroff.com.ua/images/free-accounts-for-roblox-2021.pdfIn PDF document text
- http://tehergumi.hu/images/free-robux-generaters-no-human-verivecation.pdfIn PDF document text
- http://domaizdereva24.ru/images/free-roblox-hack-no-survey-or-download.pdfIn PDF document text
- http://bkd1.balikpapan.go.id/images/counter-blox-roblox-offensive-hack-free.pdfIn PDF document text
- http://www.exikom.com.ua/images/how-to-get-free-robux-2021.pdfIn PDF document text
- https://treeconsult.de/images/crystalsheepyoutube-how-to-get-free-robux.pdfIn PDF document text
- http://www.lovecraftiana.com.ar/images/cheat-roblox-elemental-battlegrounds.pdfIn PDF document text
- http://ff-obertraun.at/images/roblox-hacks-for-rb-world-2.pdfIn PDF document text
- http://jackson-pr.com/images/f-free-robux.pdfIn PDF document text
- https://www.mvp.co.nz/images/apex-spice-free-robux.pdfIn PDF document text
- https://www.coriglianocalabro.it/images/cach-co-do-free-trong-roblox.pdfIn PDF document text
- http://www.actae.gr/images/gear-roblox-free.pdfIn PDF document text
- http://legitame.org/images/hgood-websites-to-get-free-robux-from.pdfIn PDF document text
- https://www.prodex-holz.cz/images/how-to-get-free-robux-easy-no-download-2021.pdfIn PDF document text
- http://joshherman.com/images/free-robux-no-human-verification-superfast-inspect-no-password-2021.pdfIn PDF document text
- http://energotestcontrol.ru/images/how-to-get-free-items-in-roblox-no-hack.pdfIn PDF document text
- https://www.yewtreealpacas.co.uk/images/roblox-hack-tool-download-free.pdfIn PDF document text
- http://www.jureclomas.com.ar/images/how-to-hack-free-robux-in-roblox-in-a-computer.pdfIn PDF document text
- http://www.boic.nl/images/free-dantdm-shirt-roblox.pdfIn PDF document text
- http://energotestcontrol.ru/images/how-to-exploit-roblox-with-cheat-engine.pdfIn PDF document text
- http://ernstgloves.co.il/images/roblox-injector-hack-2021.pdfIn PDF document text
- https://laconce.com/images/rbxoffers-com-free-robux-promo-codes.pdfIn PDF document text
- http://autenticohostalsalou.com/images/how-to-get-epic-face-on-roblox-for-free.pdfIn PDF document text
- https://elite-house.su/images/2021-robux-hack-no-human-verification.pdfIn PDF document text
- https://www.milewood.co.uk/images/my-brothers-roblox-account-got-hacked.pdfIn PDF document text
- http://www.kalaaliaraq.dk/images/hacking-on-roblox-c00lkidd.pdfIn PDF document text
- https://inscastellar.cat/images/free-robux-hack-not-fake.pdfIn PDF document text
- http://bwharrisalumniusa.org/images/free-expired-items-on-roblox.pdfIn PDF document text
- http://www.anies.eu/images/free-games-pastebin-roblox.pdfIn PDF document text
- http://piadaandco.it/images/best-apocalypse-hack-roblox.pdfIn PDF document text
- http://zibai.eu/images/roblox-how-to-hack-grand-blox-auto-with-cheat-engine.pdfIn PDF document text
- http://peche-madagascar.com/images/how-to-hack-to-get-free-robux-2021.pdfIn PDF document text
- https://www.air-shop.cz/images/how-to-speed-hack-in-roblox-2021.pdfIn PDF document text
- http://www.mikramarine.gr/images/get-free-rainway-nation-shirts-and-pants-roblox.pdfIn PDF document text
- https://lesegais.ru/images/roblox-hacks-4-free.pdfIn PDF document text
- https://www.ghknights.org/images/hacking-my-boyfriends-roblox-yammy.pdfIn PDF document text
- http://www.zdravazena.sk/images/free-il-robux-es-verdad.pdfIn PDF document text
- https://www.beaufortcollege.ie/images/how-tzo-hack-robux-links.pdfIn PDF document text
- https://www.hotschool.com.au/images/free-robux-no-verification-no-download-no-survey.pdfIn PDF document text
- http://greasley.online/images/free-injector-roblox.pdfIn PDF document text
- http://boliviagasenergia.com/images/how-to-gift-robux-for-free.pdfIn PDF document text
- https://www.lavigny.ch/images/roblox-booga-booga-fly-hack-may-26.pdfIn PDF document text
- https://www.alu-as.cz/images/how-to-get-free-outrageous-builders-club-on-roblox-2021.pdfIn PDF document text
- http://hydroconseil.net/images/free-robux-by-just-generating-survey.pdfIn PDF document text
- http://mechanism.gr/images/go-through-walls-roblox-hack.pdfIn PDF document text
+17 more URL(s)
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_003_off00008247.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x8247 | 25796 bytes |
SHA-256: b099630b428794782204b0c9d3391efa5b33074a4fef8cf223ed01813b8975c0 |
|||
font_01_sfnt_off0000bc26.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xBC26 | 18136 bytes |
SHA-256: e243368ed1b3cbfa3a06681253fdcf39e1a4dcaeaa925d2f623caff40d39e3be |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.