MALICIOUS
132
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
T1059.007 JavaScript
The PDF document contains numerous links to websites that appear to be part of a "game hack" and "free Robux" scam. The heuristic firings, particularly 'PDF_GAME_HACK_SEO_LINK_FARM', strongly indicate this malicious intent. While no scripts were extracted, the sheer volume of suspicious URLs and the nature of the lures suggest a phishing or scam operation designed to trick users into visiting malicious sites.
Machine Learning
- Nyx PDF Classifier malicious score 0.6193
Heuristics 5
-
PDF carries distributed game-hack scam link farm critical PDF_GAME_HACK_SEO_LINK_FARMPDF contains a free-generator/game-hack lure together with many external PDF links spread across distinct hosts whose filenames advertise game hacks, cheats, jailbreaks, generators, or free currency. This is a high-confidence scam/SEO-poisoning carrier: the PDF exists to route users into malicious or unwanted download/redirect chains, not to present normal document content.
-
PDF carries game-hack generator link farm medium PDF_GAME_HACK_LINK_FARMPDF contains a gaminggenerator.org app lure together with multiple external PDF links whose filenames advertise game hacks, cheats, jailbreaks, or generators. This is a lure/delivery link farm rather than a PDF exploit: the risk is the linked redirection chain.
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/andi-robux-free PDF link annotation
- http://echosvoix.ch/images/descargar-roblox-hackeado-apk.pdfIn PDF document text
- http://nouveaupavillon.fr/images/roblox-com-free-robux-obby.pdfIn PDF document text
- https://europainstitut.hu/images/free-roblox-robux-generator-code.pdfIn PDF document text
- http://vibrato.fr/images/free-robux-100-real-2021.pdfIn PDF document text
- http://dermaceutic.co.uk/images/how-to-get-robux-the-easy-way-by-hacking-2021.pdfIn PDF document text
- http://ivalor.fr/images/roblox-hack-apk-download-pc.pdfIn PDF document text
- http://medimacs.eu/images/free-roblox-accounts-2021-biz.pdfIn PDF document text
- http://legitame.org/images/cheat-tables-roblox.pdfIn PDF document text
- http://uctovnictvosnv.sk/images/roblox-gold-chain-free.pdfIn PDF document text
- http://www.remiauclair.fr/images/how-to-get-free-robux-on-ipad-real.pdfIn PDF document text
- https://pa-waingapu.go.id/images/www-bloxy-world-roblox-free-robux.pdfIn PDF document text
- https://www.cfdcnv.com/images/5-hacker-fampsos-roblox.pdfIn PDF document text
- http://www.fluidtech.hu/images/free-sparkle-wings-roblox.pdfIn PDF document text
- http://www.copoint.co.uk/images/roblox-how-to-get-bc-for-free.pdfIn PDF document text
- https://ballaratcaravans.com.au/images/hackaron-com-roblox.pdfIn PDF document text
- http://www.vktzunami.cz/images/how-do-you-hack-on-roblox-prison-life.pdfIn PDF document text
- http://aistplus.ru/images/cheat-seconds-thill-death-roblox.pdfIn PDF document text
- https://www.knxuk.org/images/free-robux-no-survey-no-offers.pdfIn PDF document text
- http://harmonygardens.ca/images/free-robux-no-human-verification-and-no-application-2021.pdfIn PDF document text
- http://kids-academy.pl/images/hack-murder-mystery-roblox-a-telecharger-gratuitement.pdfIn PDF document text
- https://www.ghknights.org/images/como-conseguir-ropa-gratis-en-roblox-2021-hack.pdfIn PDF document text
- http://dos.most.gov.la/images/hack-para-roblox-descargar.pdfIn PDF document text
- http://cekmekoygundem.com/images/roblox-hack-tool-no-survey.pdfIn PDF document text
- https://www.lavigny.ch/images/roblox-cat-shirt-free.pdfIn PDF document text
- https://www.cfdcnv.com/images/how-to-get-free-beautiful-hair-on-roblox.pdfIn PDF document text
- http://seytarehco.com/images/hacker-outfit-on-roblox.pdfIn PDF document text
- http://giolantapepe.gr/images/roblox-dragon-ball-rage-hack-december-2021.pdfIn PDF document text
- http://cmme.it/images/roblox-money-cheats-2021.pdfIn PDF document text
- http://aeroclub-kaernten.at/images/free-roblox-apoc-servers.pdfIn PDF document text
- http://ghegamethu.vn/images/how-to-join-roblox-builders-club-free.pdfIn PDF document text
- http://nosocomium.rv.ua/images/cheat-engine-how-to-destroy-a-roblox-server.pdfIn PDF document text
- http://wireprod.net/images/cheat-code-farming-simulator-roblox.pdfIn PDF document text
- http://revival-gang.de/images/html-falso-para-roblox-para-free-robux.pdfIn PDF document text
- https://www.fhccu.com/images/roblox-2021-download-free.pdfIn PDF document text
- http://xn--apartementos-smfora-cala-ratjada-4vc.de/images/roblox-thats-free.pdfIn PDF document text
- http://texnes-plus.gr/images/free-bicycle-man-roblox.pdfIn PDF document text
- http://tecnodue.com/images/cheats-for-doengeon-quest-in-roblox.pdfIn PDF document text
- http://internetdeputy.com/images/roblox-unjailbreak-hack-executor.pdfIn PDF document text
- https://jdlgroup.ca/images/anarchy-roblox-hack.pdfIn PDF document text
- http://dermaceutic.co.uk/images/best-free-roblox-level-7-full-lua-eecutor-august-2021.pdfIn PDF document text
- http://www.torvet11.dk/images/how-to-hack-on-roblox-in-3-simple-steps-animated.pdfIn PDF document text
- https://gomsa.nl/images/games-like-bloxburg-but-free-on-roblox.pdfIn PDF document text
- http://shiny-nn.ru/images/uitbxclub-roblox-robux-hacking.pdfIn PDF document text
- http://www.jureclomas.com.ar/images/redline-cheat-roblox.pdfIn PDF document text
- http://bunadsmaria.com/images/free-roblox-account-with-robux-2021.pdfIn PDF document text
- http://www.fluidtech.hu/images/hack-robux-using-google-chrome.pdfIn PDF document text
- http://lamascheradiferro.dk/images/free-falling-roblox-codes.pdfIn PDF document text
- http://bkd1.balikpapan.go.id/images/how-to-hack-in-any-game-on-roblox.pdfIn PDF document text
- https://www.wildpark-johannismuehle.de/images/free-robux-no-survey-and-no-human-verification.pdfIn PDF document text
+14 more URL(s)
Extracted artifacts 3
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_003_off0000844d.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x844D | 25900 bytes |
SHA-256: 285bcc1b7f6fcaeafd4611d06c8fc1cc7911219fb149112afdbf3167bf2be000 |
|||
font_01_sfnt_off0000bf93.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xBF93 | 2844 bytes |
SHA-256: baad2f3f6808f4af03fa9398e38c580c8d846f7f773a947d8cc1f39b2753d31a |
|||
font_02_sfnt_off0000c954.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xC954 | 17700 bytes |
SHA-256: daaeaf943ae792e67d4a0cd4b0b7ae5aa5350d81e0b8c50bcfe5c3ad94766a4e |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.