MALICIOUS
102
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
The PDF contains numerous links to websites offering game hacks and cheats, specifically for Roblox. The heuristic firings indicate this is a link farm designed to lure users to scam sites. While no scripts were extracted, the document's structure and embedded URLs strongly suggest a phishing or scamming attempt, likely delivered as a spearphishing attachment.
Machine Learning
- Nyx PDF Classifier suspicious score 0.4394
Heuristics 5
-
PDF carries distributed game-hack scam link farm critical PDF_GAME_HACK_SEO_LINK_FARMPDF contains a free-generator/game-hack lure together with many external PDF links spread across distinct hosts whose filenames advertise game hacks, cheats, jailbreaks, generators, or free currency. This is a high-confidence scam/SEO-poisoning carrier: the PDF exists to route users into malicious or unwanted download/redirect chains, not to present normal document content.
-
PDF carries game-hack generator link farm medium PDF_GAME_HACK_LINK_FARMPDF contains a gaminggenerator.org app lure together with multiple external PDF links whose filenames advertise game hacks, cheats, jailbreaks, or generators. This is a lure/delivery link farm rather than a PDF exploit: the risk is the linked redirection chain.
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/how-to-get-free-knives-in-roblox-assassin-2021 PDF link annotation
- http://www.maakherumusic.net/images/free-robux-and-bc-update.pdfIn PDF document text
- http://altc.de/images/hacking-laurenzside-roblox.pdfIn PDF document text
- https://www.audev.com/images/roblox-accont-hacking.pdfIn PDF document text
- https://www.sitiwebjoomla.it/images/cheat-code-roblox-jailbreak.pdfIn PDF document text
- http://nevesomost.by/images/free-source-las-vegas-roblox.pdfIn PDF document text
- http://escolaarboc.cat/images/free-roblox-accounts-with-robux-that-work-2021.pdfIn PDF document text
- http://eltisstudio.sk/images/robux-hacks-reddit.pdfIn PDF document text
- http://ns1.radiofacil.net/images/unlimited-jump-hack-roblox.pdfIn PDF document text
- http://bi-bordtennis.dk/images/how-to-get-2021-robux-on-roblox-free-2021.pdfIn PDF document text
- http://www.fluidtech.hu/images/roblox-build-a-boat-for-treasure-free-vip-server.pdfIn PDF document text
- http://only1you.ru/images/my-friends-account-on-roblox-has-been-hacked.pdfIn PDF document text
- http://echosvoix.ch/images/free-roblox-account-giveaway-2021.pdfIn PDF document text
- http://uptodate.az/images/roblox-hack-me-robux-no-human-verification.pdfIn PDF document text
- https://cdu-lengerich.de/images/how-to-get-free-money-on-jailbreak-roblox.pdfIn PDF document text
- http://uctovnictvosnv.sk/images/how-to-sell-an-item-for-free-on-roblox.pdfIn PDF document text
- https://gabrieliassociati.com/images/roblox-rocitizens-hack-money.pdfIn PDF document text
- http://schrichte.de/images/roblox-meepcity-hacked.pdfIn PDF document text
- http://alexanderautos.co/images/a-person-hacked-roblox-for-sex.pdfIn PDF document text
- http://fratellimazzoleni.it/images/robux-and-tix-hack-2021.pdfIn PDF document text
- https://arcasict.nl/images/hack-money-vehicle-simulator-roblox.pdfIn PDF document text
- http://yogaschooldecypres.be/images/robux-cheat-codes-2021.pdfIn PDF document text
- https://sdg-trade.com/images/access-flamethrower-for-free-roblox-car-crushers-2.pdfIn PDF document text
- http://legs11.co.za/images/iron-man-simulator-roblox-war-machines-hack-lua-c-script.pdfIn PDF document text
- https://teatrofinisterrae.cl/images/wearedevs-roblox-game-exploits-and-cheats.pdfIn PDF document text
- https://reggieslockandkey.com/images/roblox-urbis-cheats.pdfIn PDF document text
- http://gruporamos.do/images/hack-any-tycoon-roblox-win10.pdfIn PDF document text
- https://ceranique.nl/images/how-to-get-any-roblox-game-pass-for-free.pdfIn PDF document text
- http://infoagronomia.com.ar/images/free-roaming-camera-roblox.pdfIn PDF document text
- http://standart-lab.ru/images/how-to-speed-hack-robloxity.pdfIn PDF document text
- http://eooe.gr/images/how-to-get-free-robux-hack-on-android.pdfIn PDF document text
- http://ns1.radiofacil.net/images/free-roblox-gift-card-codes-generator.pdfIn PDF document text
- http://amtabor2.at/images/how-to-get-free-robux-no-hack-or-generator.pdfIn PDF document text
- https://www.audipec.com.br/images/free-account-roblox-2021.pdfIn PDF document text
- http://fratellimazzoleni.it/images/free-iconic-skin-for-roblox.pdfIn PDF document text
- https://pagadder.com/images/roblox-robux-genetator-hack.pdfIn PDF document text
- http://schlossschaenke-andernach.de/images/free-roblox-groups-no-owner.pdfIn PDF document text
- http://columbuscigar.com/images/what-website-to-get-free-robux-ant.pdfIn PDF document text
- http://sandra-masemann.de/images/roblox-gun-free.pdfIn PDF document text
- http://www.torvet11.dk/images/cheat-engine-roblox-infinite-health.pdfIn PDF document text
- http://acktivities.com/images/roblox-tips-and-cheats.pdfIn PDF document text
- http://demenagementlandry.com/images/roblox-ad-maker-free.pdfIn PDF document text
- http://bagliomangiapane.it/images/hack-blox-piece-roblox-give-mod-menu.pdfIn PDF document text
- http://www.kalaaliaraq.dk/images/free-robux-web-site-2021.pdfIn PDF document text
- https://www.cpnf.ch/images/free-roblox-injector-for-cb.pdfIn PDF document text
- https://www.brainpads.com/images/fames-roblox-hacker.pdfIn PDF document text
- http://76remont-kvartir.ru/images/how-to-get-free-robux-no-fake-no-virus.pdfIn PDF document text
- http://www.elis-strechy.cz/images/pastebin-roblox-robux-free-2021.pdfIn PDF document text
- https://reggieslockandkey.com/images/free-hair-on-roblox-promo-code-2021.pdfIn PDF document text
- https://accord.kiev.ua/images/why-cant-i-buy-free-hats-in-roblox.pdfIn PDF document text
+9 more URL(s)
Extracted artifacts 3
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_003_off0000835e.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x835E | 38968 bytes |
SHA-256: ba036881b5ed8be04334a7f20b0bd609fbb3a1a818fb01f70c6aa24b83bf8e95 |
|||
font_01_sfnt_off0000d60e.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xD60E | 2832 bytes |
SHA-256: 77ae1c4cffa647a8fd533dfa4102e94364989f9e80b9cd131876e9d1005899a2 |
|||
font_02_sfnt_off0000dfbe.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xDFBE | 18668 bytes |
SHA-256: 233026cb7b953168f0cf7b821b44fd32535c270d04e25acfde7e01d1d8db7baa |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.