MALICIOUS
132
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
The PDF document contains numerous embedded URLs and text referencing game hacks and free in-game currency, specifically for Roblox. The heuristic firings indicate this is a link farm designed to lure users to scam sites. While no scripts were explicitly extracted, the nature of the content and the high number of external links suggest a phishing or scamming attempt.
Machine Learning
- Nyx PDF Classifier malicious score 0.8177
Heuristics 5
-
PDF carries distributed game-hack scam link farm critical PDF_GAME_HACK_SEO_LINK_FARMPDF contains a free-generator/game-hack lure together with many external PDF links spread across distinct hosts whose filenames advertise game hacks, cheats, jailbreaks, generators, or free currency. This is a high-confidence scam/SEO-poisoning carrier: the PDF exists to route users into malicious or unwanted download/redirect chains, not to present normal document content.
-
PDF carries game-hack generator link farm medium PDF_GAME_HACK_LINK_FARMPDF contains a gaminggenerator.org app lure together with multiple external PDF links whose filenames advertise game hacks, cheats, jailbreaks, or generators. This is a lure/delivery link farm rather than a PDF exploit: the risk is the linked redirection chain.
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/hack-my-roblox-acount-now PDF link annotation
- https://www.ncscolour.no/images/speed-hacks-roblox-download.pdfIn PDF document text
- https://www.foodsafety.cz/images/free-online-games-similar-to-roblox.pdfIn PDF document text
- http://www.rezbb.sk/images/roblox-hack-redline-v3-0-download.pdfIn PDF document text
- https://ballaratcaravans.com.au/images/roblox-best-outfits-free.pdfIn PDF document text
- http://www.remiauclair.fr/images/forcefield-roblox-hack-cheat-engine-working.pdfIn PDF document text
- https://tokunfome.com.br/images/roblox-hacks-no-virus.pdfIn PDF document text
- http://pa-tanjungselor.go.id/images/como-conseguir-robux-hack-2021.pdfIn PDF document text
- https://amatq.ca/images/roblox-speed-hack-script-v3rmilion.pdfIn PDF document text
- http://www.jureclomas.com.ar/images/how-to-hack-free-robux-in-roblox-in-a-computer.pdfIn PDF document text
- http://www.fanciullovito.it/images/im-using-a-hacked-clinet-music-id-roblox.pdfIn PDF document text
- http://uptodate.az/images/how-to-get-free-robux-birthday-glitch.pdfIn PDF document text
- https://consorziocsa-asicaivano.it/images/bunbun-girl-roblox-hacker.pdfIn PDF document text
- https://www.milewood.co.uk/images/free-robux-with-no-verify.pdfIn PDF document text
- http://escolaarboc.cat/images/free-robux-website-linkmon.pdfIn PDF document text
- http://www.malonmalon.com.ar/images/how-to-get-free-robux-without-downloading-or-human-verification.pdfIn PDF document text
- https://www.ncscolour.no/images/youtube-how-do-u-get-free-robux.pdfIn PDF document text
- https://ballaratcaravans.com.au/images/skin-roblox-free.pdfIn PDF document text
- https://www.lomrad.go.th/images/roblox-admin-commands-hack.pdfIn PDF document text
- https://meltonschool.org/images/yt-roblox-hack-protect-character.pdfIn PDF document text
- http://www.malonmalon.com.ar/images/free-codes-for-roblox-assassin.pdfIn PDF document text
- https://meltonschool.org/images/creator-hack-script-roblox.pdfIn PDF document text
- https://www.cfdcnv.com/images/how-to-hack-roblox-to-get-robux-no-survey.pdfIn PDF document text
- https://pa-waingapu.go.id/images/free-roblox-vip-server-for-lab-experiment.pdfIn PDF document text
- http://www.agri-tech.com.au/images/how-to-get-1-million-robux-for-free-really-easy.pdfIn PDF document text
- https://gomsa.nl/images/smiling-girl-roblox-free.pdfIn PDF document text
- https://www.lavigny.ch/images/how-to-do-hacks-on-roblox.pdfIn PDF document text
- https://gomsa.nl/images/roblox-hack-no-offers.pdfIn PDF document text
- https://www.sitiwebjoomla.it/images/roblox-plants-vs-zombies-battlegorunds-hack.pdfIn PDF document text
- http://www.torvet11.dk/images/previous-next-free-roblox-pokemon-go-6-new-by-heavenloginplay.pdfIn PDF document text
- http://kids-academy.pl/images/free-robux-cydia.pdfIn PDF document text
- https://eddar.fr/images/roblox-free-robux-hack-android.pdfIn PDF document text
- http://www.rezbb.sk/images/rbx-points-get-free-robux-points.pdfIn PDF document text
- http://www.torvet11.dk/images/how-to-hack-phantom-forces-roblox-2021-for-free.pdfIn PDF document text
- http://www.agri-tech.com.au/images/how-to-easily-get-robux-for-free-on-a-phone.pdfIn PDF document text
- https://www.beaufortcollege.ie/images/free-robux-2021-april.pdfIn PDF document text
- https://www.tsdb.com.au/images/roblox-nike-free-auttaucollant.pdfIn PDF document text
- http://www.cosver.nl/images/free-robux-2021-febuary.pdfIn PDF document text
- https://www.seeingindependence.org/images/how-to-get-free-robux-and-tix-november-2021.pdfIn PDF document text
- http://www.eurosan1.ba/images/free-alts-roblox.pdfIn PDF document text
- http://www.anies.eu/images/roblox-free-superhero-body.pdfIn PDF document text
- http://dos.most.gov.la/images/hack-de-robux-2021.pdfIn PDF document text
- https://estalagemmonteverde.com.br/images/hack-clinet-for-roblox.pdfIn PDF document text
- https://www.albisser.ch/images/how-to-get-free-robux-working-with-roblox.pdfIn PDF document text
- http://www.inservis.cl/images/como-usar-cheat-engine-en-roblox.pdfIn PDF document text
- http://www.zdravazena.sk/images/free-robux-v3m.pdfIn PDF document text
- http://www.inservis.cl/images/free-promo-codes-2021-october-roblox.pdfIn PDF document text
- https://pemadamapi.net/images/inf-health-script-roblox-hack.pdfIn PDF document text
- https://amatq.ca/images/roblox-hacks-2021-free-robux.pdfIn PDF document text
- http://aeroclub-kaernten.at/images/free-robux-codes-live-youtube.pdfIn PDF document text
+2 more URL(s)
Extracted artifacts 3
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
font_00_sfnt_off0000573d.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x573D | 23048 bytes |
SHA-256: 8f26b19e900395d99c2bf2b136c126a09f427dc30df10e7dbde4e3c9e24eea10 |
|||
font_01_sfnt_off00008ab9.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x8AB9 | 2896 bytes |
SHA-256: c1a618813a64314343402b2ec738fc11c4c912460a4c7ae3029924d2f9a229cd |
|||
font_02_sfnt_off0000949e.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x949E | 18752 bytes |
SHA-256: b3d5089630578afe9b0f9bcac846aa0a3f65583feaf6c01c3be878c7f6fb81d3 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.