MALICIOUS
102
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
T1204.002 Malicious Link
The PDF document contains numerous embedded URLs and a heuristic firing indicates it is a 'game hack scam link farm'. The document body and extracted URLs predominantly point to sites offering 'free Robux' or 'hacks' for the game Roblox, suggesting a phishing or scam lure. The primary attack pattern involves directing users to malicious websites through embedded links, likely to steal credentials or trick them into downloading further malware.
Machine Learning
- Nyx PDF Classifier suspicious score 0.4394
Heuristics 5
-
PDF carries distributed game-hack scam link farm critical PDF_GAME_HACK_SEO_LINK_FARMPDF contains a free-generator/game-hack lure together with many external PDF links spread across distinct hosts whose filenames advertise game hacks, cheats, jailbreaks, generators, or free currency. This is a high-confidence scam/SEO-poisoning carrier: the PDF exists to route users into malicious or unwanted download/redirect chains, not to present normal document content.
-
PDF carries game-hack generator link farm medium PDF_GAME_HACK_LINK_FARMPDF contains a gaminggenerator.org app lure together with multiple external PDF links whose filenames advertise game hacks, cheats, jailbreaks, or generators. This is a lure/delivery link farm rather than a PDF exploit: the risk is the linked redirection chain.
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/escape-the-free-robux-scams-freecookie20214 PDF link annotation
- http://pa-tanjungselor.go.id/images/escape-mario-area-51-roblox-game-download-free.pdfIn PDF document text
- http://linde-erbach.de/images/cheat-engine-65-roblox.pdfIn PDF document text
- http://mydevice.com.au/images/robux-free-codes-2021.pdfIn PDF document text
- http://boliviagasenergia.com/images/cmo-hackear-cuenta-de-roblox.pdfIn PDF document text
- http://finettifrs.it/images/fly-hack-in-roblox-with-cheat-engine.pdfIn PDF document text
- https://rincondelentrenador.com/images/roblox-admin-hack-dll.pdfIn PDF document text
- http://kfz-service-etp.de/images/roblox-games-free-play-now.pdfIn PDF document text
- http://www.friendshiptransport.net/images/top-5-juego-hackeado-roblox.pdfIn PDF document text
- http://www.marambio.com.ar/images/roblos-free-robux.pdfIn PDF document text
- http://hocquaux.fr/images/how-to-make-clothes-without-hacks-or-bc-roblox.pdfIn PDF document text
- https://amatq.ca/images/free-roblox-gift-card-codes-that-work.pdfIn PDF document text
- http://halitbayramoglu.com.tr/images/free-robux-only-today-ad.pdfIn PDF document text
- https://rieber-transporte.de/images/ad-why-cant-have-robux-for-free.pdfIn PDF document text
- http://osteonad.com/images/natural-disasters-hack-roblox.pdfIn PDF document text
- http://aeroclub-kaernten.at/images/how-to-get-infinite-health-in-roblox-with-cheat-engine.pdfIn PDF document text
- https://meltonschool.org/images/how-to-be-a-hacker-in-roblox-jailbreak.pdfIn PDF document text
- http://nosocomium.rv.ua/images/free-admin-hack-roblox.pdfIn PDF document text
- http://cosver.eu/images/roblox-free-rthros.pdfIn PDF document text
- http://fmbompastor.com.br/images/free-robux-console-pastebin.pdfIn PDF document text
- http://fiur-malermeister.de/images/hacking-in-roblox-wild-savannah.pdfIn PDF document text
- http://cosver.eu/images/beyond-roblox-hack-wiki.pdfIn PDF document text
- https://hbpbenin.com/images/roblox-free-accounts-discord.pdfIn PDF document text
- http://cmme.it/images/jailbreak-roblox-hack-money.pdfIn PDF document text
- http://selectionspdf.fr/images/como-ser-hacker-en-roblox-atravesar-paredes.pdfIn PDF document text
- https://www.ncscolour.no/images/free-instant-catalog-item-roblox.pdfIn PDF document text
- http://bit-sky.com/images/how-to-get-free-robux-generator-no-survey.pdfIn PDF document text
- http://jijel.info/images/how-t-hack-any-roblox-game-with-scripts.pdfIn PDF document text
- http://gamixpaliwa.pl/images/free-usaf-lackland-for-roblox.pdfIn PDF document text
- https://tokunfome.com.br/images/how-to-get-free-vip-on-any-server-on-roblox.pdfIn PDF document text
- http://m-sv.net/images/how-do-you-get-free-roblox-clothes.pdfIn PDF document text
- http://ohsawamacrobiotics.com/images/good-hacking-site-for-roblox.pdfIn PDF document text
- http://www.cosver.nl/images/roblox-dbor-how-to-hack-levels.pdfIn PDF document text
- http://axia-verlag.at/images/hack-scripts-roblox-may-5.pdfIn PDF document text
- https://hassel-event.de/images/trybox-site-free-robux.pdfIn PDF document text
- http://www.gadanie.lv/images/free-robux-hack-on-tablet.pdfIn PDF document text
- https://www.europap.cz/images/trurkey-hack-roblox.pdfIn PDF document text
- http://zarinnameh.ir/images/are-robux-hack-legit-forums.pdfIn PDF document text
- http://jaeger-bauplanung.de/images/free-robux-codes-2021-without-human-verification.pdfIn PDF document text
- http://www.maakherumusic.net/images/how-to-get-free-ranks-in-roblox-groups.pdfIn PDF document text
- http://pa-tanjungselor.go.id/images/roblox-free-stuff-list.pdfIn PDF document text
- http://omahahospitalityhalloffame.org/images/roblox-hack-999999-robux-ios.pdfIn PDF document text
- http://www.eurologistiki.gr/images/free-robux-real-roblox.pdfIn PDF document text
- https://inscastellar.cat/images/free-roblox-shirt-file.pdfIn PDF document text
- http://stitchingart.com/images/roblox-money-cheat-rocitizens.pdfIn PDF document text
- http://www.hawler.in/images/hacks-for-murder-mystery-2-roblox.pdfIn PDF document text
- http://santjoandelesabadesses.cat/images/hexus-download-free-roblox.pdfIn PDF document text
- https://europe-upkl.eu/images/slurp-download-roblox-hack.pdfIn PDF document text
- https://www.stkdb.cz/images/how-much-you-get-banned-for-hacking-roblox.pdfIn PDF document text
- https://verdensbarn.no/images/roblox-hack-cheat-engine-65-robux.pdfIn PDF document text
+9 more URL(s)
Extracted artifacts 3
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_003_off00008274.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x8274 | 25984 bytes |
SHA-256: ee827b7dc4060395770f65378a3be538f0c7184dc162865e13dcf51ce6554f4f |
|||
font_01_sfnt_off0000bbf1.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xBBF1 | 11440 bytes |
SHA-256: 154d59d1680f2d1e38ccb783d6997f344290d121007e51df331726de4128c12e |
|||
font_02_sfnt_off0000d711.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xD711 | 19164 bytes |
SHA-256: d6b477fa7d49e22b7640c5e703702a5e4d9dad0dae63b147f238b472e829967f |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.