MALICIOUS
132
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
T1204.002 Malicious Link
The PDF file contains numerous links to websites that promote game hacks and free virtual currency, such as 'free robux'. The heuristic PDF_GAME_HACK_SEO_LINK_FARM indicates a scam-like structure designed to attract users through search engines. The presence of many external URIs and the ML classifier output further support a malicious classification. The document body is populated with these scam URLs, reinforcing the attack pattern.
Machine Learning
- Nyx PDF Classifier malicious score 0.6193
Heuristics 5
-
PDF carries distributed game-hack scam link farm critical PDF_GAME_HACK_SEO_LINK_FARMPDF contains a free-generator/game-hack lure together with many external PDF links spread across distinct hosts whose filenames advertise game hacks, cheats, jailbreaks, generators, or free currency. This is a high-confidence scam/SEO-poisoning carrier: the PDF exists to route users into malicious or unwanted download/redirect chains, not to present normal document content.
-
PDF carries game-hack generator link farm medium PDF_GAME_HACK_LINK_FARMPDF contains a gaminggenerator.org app lure together with multiple external PDF links whose filenames advertise game hacks, cheats, jailbreaks, or generators. This is a lure/delivery link farm rather than a PDF exploit: the risk is the linked redirection chain.
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/free-robux-hack-forum-by-vix PDF link annotation
- http://keepcasscountybeautiful.com/images/free-money-is-roblox.pdfIn PDF document text
- http://greasley.online/images/boku-no-legacy-roblox-free-spins.pdfIn PDF document text
- http://abst-brandschutztechnik.com/images/free-promo-codes-roblox-not-expired.pdfIn PDF document text
- http://eltisstudio.sk/images/free-roblox-hack-us.pdfIn PDF document text
- http://pia2000.net/images/roblox-shotgun-lua-hack-command.pdfIn PDF document text
- http://kontaktadig.se/images/roblox-fashion-famous-hack.pdfIn PDF document text
- http://www.sitiamministrabili.it/images/are-you-allowed-to-hack-roblox.pdfIn PDF document text
- https://www.stoehr-sauer.de/images/roblox-login-free-online.pdfIn PDF document text
- https://zabota-kashira.ru/images/does-cheat-engine-excute-scripts-into-roblox.pdfIn PDF document text
- https://www.porthos.it/images/free-robux-quick-and-easy-no-hastle.pdfIn PDF document text
- http://towtrucklosangeles.com/images/roblox-vehicle-simulator-how-to-get-the-free-volkswagen.pdfIn PDF document text
- http://www.eurologistiki.gr/images/can-u-make-t-shirts-for-free-roblox-2021.pdfIn PDF document text
- https://www.najeebqasmi.com/images/free-robux-and-tix-generator-2021-no-download.pdfIn PDF document text
- https://www.lavigny.ch/images/hack-para-trials-simon-says-roblox.pdfIn PDF document text
- http://ivpr.net/images/roblox-hack-android-1-com.pdfIn PDF document text
- http://gingerscience.co.in/images/free-roblox-gift-card-codes-2021-march.pdfIn PDF document text
- http://www.centromedicoaurora.it/images/viper-venom-roblox-hack-download.pdfIn PDF document text
- http://www.eurosan1.ba/images/how-to-hack-a-roblox-account-password.pdfIn PDF document text
- https://technospektr.com.ua/images/roblox-how-to-get-free-gamepasses-2021.pdfIn PDF document text
- http://www.mikramarine.gr/images/free-robux-admin-code-pastebin.pdfIn PDF document text
- http://baah.ca/images/roblox-dragon-ball-online-cheat-codes.pdfIn PDF document text
- http://www.inservis.cl/images/does-roblox-ip-ban-for-hacking.pdfIn PDF document text
- https://www.sauvonsleclimat.org/images/hacks-for-roblox-apocalypse-rising.pdfIn PDF document text
- https://www.hofe-gmbh.de/images/free-robux-gift-card-giveawa.pdfIn PDF document text
- http://kruiz21.ru/images/how-to-get-your-roblox-account-hacked.pdfIn PDF document text
- http://www.eptaviation.com/images/roblox-clothes-codes-to-get-for-free.pdfIn PDF document text
- https://www.stadtbesichtigungen.de/images/how-to-noclip-in-roblox-with-cheat-engine.pdfIn PDF document text
- http://onlinemusicsolutions.com.au/images/roblox-robux-hack-pc-2021.pdfIn PDF document text
- http://prohsa.com/images/royale-high-school-roblox-cheats.pdfIn PDF document text
- http://safari-crimea.com/images/hack-para-mocap-dancing-vip-gratis-roblox.pdfIn PDF document text
- https://cintasoeste.com.ar/images/roblox-frees-tag.pdfIn PDF document text
- https://www.milewood.co.uk/images/roblox-boss-mania-hack.pdfIn PDF document text
- https://pagadder.com/images/free-robux-2021-real.pdfIn PDF document text
- https://www.coriglianocalabro.it/images/easy-robux-hack-on-phone.pdfIn PDF document text
- http://texnes-plus.gr/images/free-robux-2021-fevruaryu.pdfIn PDF document text
- http://www.pcclawyers.com.au/images/www-free-robux-com.pdfIn PDF document text
- https://itv-grabungen.de/images/account-stealing-hack-roblox-zero.pdfIn PDF document text
- http://eleveurs-autrement.fr/images/hacker-roblox-server.pdfIn PDF document text
- http://reisebild.eu/images/roblox-speed-hack-booga-booga.pdfIn PDF document text
- https://www.cosmosdawn.net/images/free-robux-guy.pdfIn PDF document text
- https://gomsa.nl/images/roblox-magic-simolator-hack-script.pdfIn PDF document text
- http://britishcomics.com/images/que-pasa-si-mientes-al-hacker-de-roblox.pdfIn PDF document text
- http://aeroclub-kaernten.at/images/free-synapses-roblox.pdfIn PDF document text
- https://pneukalousek.cz/images/how-to-get-free-robux-2021-hack.pdfIn PDF document text
- https://pa-waingapu.go.id/images/roblox-vip-hack-fashion.pdfIn PDF document text
- http://szekelymozes.ro/images/fps-hacks-roblox-aimbot-how-to-activate-ambot.pdfIn PDF document text
- http://gamixpaliwa.pl/images/how-to-hack-a-roblox-account-password.pdfIn PDF document text
- http://mostowicz.pl/images/descargar-roblox-hackeado-con-robux.pdfIn PDF document text
- http://onlinemusicsolutions.com.au/images/destruction-simulator-hack-roblox.pdfIn PDF document text
+11 more URL(s)
Extracted artifacts 3
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_003_off000081e0.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x81E0 | 27124 bytes |
SHA-256: 2365f43950e1939d34edabe32433b089a3a4244f2ca7c6349800a57cce84e3cd |
|||
font_01_sfnt_off0000beb9.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xBEB9 | 2832 bytes |
SHA-256: 77ae1c4cffa647a8fd533dfa4102e94364989f9e80b9cd131876e9d1005899a2 |
|||
font_02_sfnt_off0000c869.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xC869 | 18476 bytes |
SHA-256: 1bcc8fc23c921585658ce5be739860a51a349d0f0438369af25393b24d9a852f |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.