MALICIOUS
132
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
T1204.002 Malicious Link
The PDF document contains numerous links to websites that promise free game currency or hacks, specifically related to Roblox. The heuristic firings indicate a 'game-hack scam link farm', suggesting the primary purpose is to direct users to potentially malicious or scam websites. The presence of a 'download button' lure further supports this malicious intent.
Machine Learning
- Nyx PDF Classifier malicious score 0.6193
Heuristics 5
-
PDF carries distributed game-hack scam link farm critical PDF_GAME_HACK_SEO_LINK_FARMPDF contains a free-generator/game-hack lure together with many external PDF links spread across distinct hosts whose filenames advertise game hacks, cheats, jailbreaks, generators, or free currency. This is a high-confidence scam/SEO-poisoning carrier: the PDF exists to route users into malicious or unwanted download/redirect chains, not to present normal document content.
-
PDF carries game-hack generator link farm medium PDF_GAME_HACK_LINK_FARMPDF contains a gaminggenerator.org app lure together with multiple external PDF links whose filenames advertise game hacks, cheats, jailbreaks, or generators. This is a lure/delivery link farm rather than a PDF exploit: the risk is the linked redirection chain.
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/free-roblox-download-for-android PDF link annotation
- https://sectorpravdy.com/images/how-to-hack-unicorn-in-roblox.pdfIn PDF document text
- http://pourvosvacances.com/images/how-to-hack-a-account-on-roblox-2021-no-logout.pdfIn PDF document text
- https://zsdunajskaluzna.sk/images/new-free-robux-unlimited-free-robux-no-save-buy-proof.pdfIn PDF document text
- http://svp-steinmaur.ch/images/how-to-hack-robux-with-cheat-engine-2021.pdfIn PDF document text
- http://eddegrootassurantien.nl/images/free-robux-for-kids-no-human-verification.pdfIn PDF document text
- http://echosvoix.ch/images/murder-mystery-free-code-knife-games-roblox.pdfIn PDF document text
- https://www.saisystem.it/images/roblox-20-body-free.pdfIn PDF document text
- http://mydevice.com.au/images/hack-nuevo-para-roblox-2021-btools.pdfIn PDF document text
- http://maslabaou.com/images/roblox-4-free-items.pdfIn PDF document text
- http://ghegamethu.vn/images/11-4-2021-roblox-hack.pdfIn PDF document text
- http://sealysports.com/images/walking-trhought-wall-cheat-engine-meme-roblox-jailbreak.pdfIn PDF document text
- http://escolaarboc.cat/images/how-to-get-free-coins-in-phantom-forces-roblox.pdfIn PDF document text
- https://bancroftandsons.com/images/how-to-use-inspect-element-to-get-free-robux.pdfIn PDF document text
- http://eltisstudio.sk/images/kid-gets-caught-cheating-on-roblox.pdfIn PDF document text
- http://www.viniperfetti.com/images/how-to-get-free-money-on-adopt-me-roblox-2021.pdfIn PDF document text
- http://www.nielsen2u.dk/images/hacks-bacon-shirt-roblox.pdfIn PDF document text
- https://www.osoc.com/images/free-robux-2021-september.pdfIn PDF document text
- https://corbo.ru/images/roblox-work-at-a-pizza-place-cheats-2021.pdfIn PDF document text
- http://electricpasion.com/images/roblox-dinosaur-sim-easy-downloading-cheats.pdfIn PDF document text
- http://technologicalsc.com/images/roblox-building-tools-hack.pdfIn PDF document text
- http://traveltrucks.com.au/images/get-free-robux-today-only.pdfIn PDF document text
- http://www.notaioricci.it/images/alpha-hack-roblox.pdfIn PDF document text
- https://semanasantacehegin.com/images/roblox-theme-park-tycoon-2-cheat-engine.pdfIn PDF document text
- http://safari-crimea.com/images/roblox-gift-card-free-codes-2021.pdfIn PDF document text
- http://www.bripi.pl/images/free-robux-www-com.pdfIn PDF document text
- http://belagrogen.by/images/free-robux-and-tix-2021.pdfIn PDF document text
- http://avd-weiden.bayern/images/hacks-for-roblox-script.pdfIn PDF document text
- http://nevesomost.by/images/roblox-youtube-roblox-locus-hacking-my-sisters-acount.pdfIn PDF document text
- https://socialvalue.gr/images/hacking-galaxykittty2021-on-roblox.pdfIn PDF document text
- http://www.arredifunebri.com/images/free-roblox-accounts-and-passwords.pdfIn PDF document text
- https://www.plumbermedics.com/images/how-to-get-robux-using-cheat-engine-63.pdfIn PDF document text
- http://babyxpress.de/images/robux-hack-no-survey-no-password.pdfIn PDF document text
- https://www.milewood.co.uk/images/roblox-solo-hack-client.pdfIn PDF document text
- http://engelum.com/images/how-to-get-the-boss-packet-for-free-roblox.pdfIn PDF document text
- http://www.duchidicastelluccio.it/images/how-to-get-free-dragons-in-roblox-dragon-adventure.pdfIn PDF document text
- http://armatrutz.de/images/free-robux.pdfIn PDF document text
- https://www.belgium-archery.be/images/how-to-get-free-robux-and-bc-2021-legit.pdfIn PDF document text
- http://arthakranti.org/images/dansploit-roblox-hack-download.pdfIn PDF document text
- http://peche-madagascar.com/images/how-do-you-hack-an-acounte-on-roblox.pdfIn PDF document text
- http://cmme.it/images/harked-cheat-for-roblox.pdfIn PDF document text
- http://mymarketdeli.com/images/free-secret-roblox-name-pass-hack.pdfIn PDF document text
- http://gops.pruszczgdanski.pl/images/ban-roblox-pour-avoir-hacker-des-robux.pdfIn PDF document text
- http://gremihostaleria.cat/images/do-you-get-free-roblox-builders-club-on-the-weekend.pdfIn PDF document text
- http://arch-centr.ru/images/hacks-for-roblox-counter-blox.pdfIn PDF document text
- http://lillysonthelake.com/images/free-robux-advertisment-site.pdfIn PDF document text
- http://www.hotel-seminaire.com/images/free-objet-roblox.pdfIn PDF document text
- http://www.metinadistribuzione.com/images/roblox-bank-tycoon-money-cheats.pdfIn PDF document text
- http://msfs-eastafrica.com/images/free-annualy-robux.pdfIn PDF document text
- http://www.gongoff.com/images/robux-free-apk.pdfIn PDF document text
+15 more URL(s)
Extracted artifacts 3
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_003_off000085a0.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x85A0 | 25616 bytes |
SHA-256: dff95f1797cc01517dbf93793f448bd0b2cfb0270e66281f961ffeb37a316de9 |
|||
font_01_sfnt_off0000bfe5.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xBFE5 | 2844 bytes |
SHA-256: baad2f3f6808f4af03fa9398e38c580c8d846f7f773a947d8cc1f39b2753d31a |
|||
font_02_sfnt_off0000c9a6.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xC9A6 | 18196 bytes |
SHA-256: d022093badb8492639f14d23c6bb36bb9c4c6ba7f0d07896ec22e529d1ca2790 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.