SUSPICIOUS
42
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
The PDF document contains multiple embedded URLs, with the primary one being http://gaminggenerator.org/app/431946152/how-to-get-wings-for-free-roblox, which is presented as a lure for free in-game items. The ML classifier flagged this PDF as malicious, and the presence of external URIs and a download button heuristic further supports a malicious intent. While no scripts were explicitly extracted, the overall structure and heuristics suggest this document is designed to redirect users to potentially harmful websites.
Machine Learning
- Nyx PDF Classifier malicious score 0.7795
Heuristics 3
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/how-to-get-wings-for-free-roblox PDF link annotation
- http://baah.ca/images/roblox-jailbreak-script-hack.pdfIn PDF document text
- http://energotestcontrol.ru/images/free-roblox-app.pdfIn PDF document text
- http://archi-z.ru/images/roblox-hack-gamepass.pdfIn PDF document text
- https://www.romedia.gr/images/discover-now-free-robux.pdfIn PDF document text
- https://www.linzgau-kjh.de/images/inside-the-world-of-roblox-free.pdfIn PDF document text
- http://ns1.radiofacil.net/images/hack-atravesar-paredes-en-roblox.pdfIn PDF document text
- http://ff-obertraun.at/images/best-free-roblox-tycoons.pdfIn PDF document text
- https://www.saisystem.it/images/how-to-prevent-your-roblox-account-from-being-hacked.pdfIn PDF document text
- http://www.lascalamilanowallcovering.it/images/what-games-give-you-free-robux.pdfIn PDF document text
- https://consorziocsa-asicaivano.it/images/roblox-hcbb-hack.pdfIn PDF document text
- http://news123.it/images/grand-opening-cheat-codes-roblox.pdfIn PDF document text
- http://verenacrow.at/images/roblox-hack-client-ios.pdfIn PDF document text
- http://iluvlocalplaces.com/images/free-robux-quests.pdfIn PDF document text
- http://m-sv.net/images/games-that-give-you-free-stuff-on-roblox-2021.pdfIn PDF document text
- http://egorplitka.ru/images/how-to-get-1-million-robux-on-roblox-for-free.pdfIn PDF document text
- https://www.abrapppe.org.br/images/free-robux-mac-download.pdfIn PDF document text
- http://ferienwohnung-walker.de/images/roblox-xyz-hack.pdfIn PDF document text
- http://kundentest.de/images/roblox-vehicle-simulator-free-gamepass.pdfIn PDF document text
- https://estalagemmonteverde.com.br/images/hack-game-roblox-apk.pdfIn PDF document text
- https://www.inova-cuisine.fr/images/hacks-to-steal-robux-sign-up.pdfIn PDF document text
- http://kulturhusbabberich.nl/images/earn-free-robux-hack.pdfIn PDF document text
- https://gigbagwinkel.nl/images/how-to-hack-a-roblox-account-using-command-prompt.pdfIn PDF document text
- http://www.remiauclair.fr/images/cheats-for-dungeon-quest-on-roblox.pdfIn PDF document text
- https://www.foodsafety.cz/images/roblox-adopt-me-how-to-get-free-ride-potion.pdfIn PDF document text
- http://osteonad.com/images/copying-roblox-games-for-free-v3rmillion.pdfIn PDF document text
- http://ivalor.fr/images/noclip-hack-roblox-2021.pdfIn PDF document text
- https://letturatarghe.it/images/free-robux-cards-2021-codes.pdfIn PDF document text
- https://www.tartineartisanal.com/images/hack-scritp-inputter-for-roblox-hacks.pdfIn PDF document text
- http://babyxpress.de/images/hack-initiate-unlimited-free-robux-40m.pdfIn PDF document text
- http://interpretation-dessins-enfants.net/images/roblox-the-quarry-hack-cheat-engine.pdfIn PDF document text
- http://olesya-chagovets.com/images/free-builders-club-on-roblox-2021.pdfIn PDF document text
- http://www.hawler.in/images/youtube-roblox-hack-elemental-battle-ground.pdfIn PDF document text
- https://cdu-lengerich.de/images/gym-simulator-2-hack-roblox.pdfIn PDF document text
- http://julo-it.net/images/redeem-free-robux.pdfIn PDF document text
- http://lichtdrukkerijwijchen.nl/images/free-roblox-hacks-no-injector.pdfIn PDF document text
- http://safwafurniture.com/images/roblox-strucid-free-skin-code.pdfIn PDF document text
- http://erptrends.com/images/hack-roblox-pizza-place.pdfIn PDF document text
- http://svp-steinmaur.ch/images/free-onlne-roblox.pdfIn PDF document text
- http://seniornetwanganui.org.nz/images/kranberry-roblox-hack-download.pdfIn PDF document text
- http://mechanism.gr/images/free-vip-server-for-roblox-gravity-shift.pdfIn PDF document text
- https://consorziocsa-asicaivano.it/images/roblox-gamepass-e-free.pdfIn PDF document text
- http://cristalysoptic.com/images/how-to-get-free-robux-non-stop.pdfIn PDF document text
- https://corbo.ru/images/free-unlimited-robux-codes.pdfIn PDF document text
- https://www.fhccu.com/images/roblox-deep-space-tycoon-hack-script-exploit.pdfIn PDF document text
- https://www.gymun.cz/images/como-ser-hacker-roblox.pdfIn PDF document text
- http://poltekkeskhjogja.ac.id/images/free-money-adopt-me-roblox.pdfIn PDF document text
- https://www.ghknights.org/images/hack-robux-pc.pdfIn PDF document text
- http://www.anies.eu/images/free-robux-only-username-needed.pdfIn PDF document text
- https://gomsa.nl/images/how-to-use-cheat-engine-on-roblox-2021.pdfIn PDF document text
+15 more URL(s)
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_003_off000080d5.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x80D5 | 29716 bytes |
SHA-256: 80adfb25a377af643144338c1b4a69dad0be61e839b5d4dbc98deaeaf3d882fa |
|||
font_01_sfnt_off0000c2b9.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xC2B9 | 18408 bytes |
SHA-256: 59b199ae235f7c309d8a4d6cb2612d10de99a007d0782dd92e7bb42b4ff04b30 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.