MALICIOUS
132
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
The PDF file contains a large number of embedded URLs and a link farm, primarily focused on 'game hacks' and 'free items' for games like Roblox. The heuristic firings indicate this is a scam designed to drive traffic to malicious or deceptive websites. While no scripts were directly extracted, the nature of the content and the ML classification suggest a malicious intent to deceive users into visiting potentially harmful sites.
Machine Learning
- Nyx PDF Classifier malicious score 0.6193
Heuristics 5
-
PDF carries distributed game-hack scam link farm critical PDF_GAME_HACK_SEO_LINK_FARMPDF contains a free-generator/game-hack lure together with many external PDF links spread across distinct hosts whose filenames advertise game hacks, cheats, jailbreaks, generators, or free currency. This is a high-confidence scam/SEO-poisoning carrier: the PDF exists to route users into malicious or unwanted download/redirect chains, not to present normal document content.
-
PDF carries game-hack generator link farm medium PDF_GAME_HACK_LINK_FARMPDF contains a gaminggenerator.org app lure together with multiple external PDF links whose filenames advertise game hacks, cheats, jailbreaks, or generators. This is a lure/delivery link farm rather than a PDF exploit: the risk is the linked redirection chain.
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/roblox-free-items-script PDF link annotation
- https://www.foodsafety.cz/images/v3rmillion-roblox-hack.pdfIn PDF document text
- https://wandersuechtig.de/images/roblox-ghost-hack-download-2021.pdfIn PDF document text
- https://gryps.de/images/free-robux-denis.pdfIn PDF document text
- http://www.eurologistiki.gr/images/free-roblox-clothes-and-hair-girl.pdfIn PDF document text
- http://bibliotheque-perrigny-les-dijon.fr/images/free-roblox-accounts-discord-bot.pdfIn PDF document text
- https://www.abrapppe.org.br/images/dress-up-on-roblox-that-are-no-roblox-just-free.pdfIn PDF document text
- https://pa-waingapu.go.id/images/how-to-get-cool-free-avatars-on-roblox.pdfIn PDF document text
- https://gestionpatrimonial.net/images/roblox-how-did-you-do-if-you-hack.pdfIn PDF document text
- http://sb2m.com.br/images/how-to-have-200-robux-free-robux-2021.pdfIn PDF document text
- http://ilcommercialista.info/images/free-robux-hack-instantly.pdfIn PDF document text
- http://domaizdereva24.ru/images/beach-house-roleplay-roblox-hack.pdfIn PDF document text
- http://kids-academy.pl/images/instant-free-robux-com.pdfIn PDF document text
- https://willifox.com/images/black-free-tshirt-template-roblox.pdfIn PDF document text
- http://www.remiauclair.fr/images/free-robux-com-au.pdfIn PDF document text
- http://bagna.pl/images/free-robux-promo-codes-no-human-verification.pdfIn PDF document text
- http://columbuscigar.com/images/roblox-apocalypse-rising-how-to-get-into-hardocre-free.pdfIn PDF document text
- https://www.cpnf.ch/images/roblox-hacking-on-a-vip-server.pdfIn PDF document text
- http://kompanievska-selrada.gov.ua/images/roblox-rogue-lineage-hack.pdfIn PDF document text
- http://sscclc.edu.ec/images/free-csgo-skins-roblox-id.pdfIn PDF document text
- https://www.brainpads.com/images/how-to-hack-roblox-robux-2021.pdfIn PDF document text
- http://daksz.hu/images/how-to-get-free-robux-on-fortnite.pdfIn PDF document text
- http://www.lionel-seppoloni.fr/images/roblox-robux-hack-no-download-no-survey-2021.pdfIn PDF document text
- http://bilhetim.com.br/images/how-do-you-be-a-hacker-in-roblox.pdfIn PDF document text
- http://www.prylfabriken.se/images/is-there-a-working-roblox-robux-hack.pdfIn PDF document text
- http://ns1.radiofacil.net/images/how-to-get-free-robux-with-android.pdfIn PDF document text
- https://ballaratcaravans.com.au/images/auto-clicker-mac-free-roblox.pdfIn PDF document text
- https://www.lavigny.ch/images/hack-tower-battle-roblox.pdfIn PDF document text
- https://consorziocsa-asicaivano.it/images/free-roblox-hack-without-human-verification.pdfIn PDF document text
- http://gops.pruszczgdanski.pl/images/free-robux-without-human-verification-and-email.pdfIn PDF document text
- http://ferienwohnung-walker.de/images/free-robux-hack-not-fake.pdfIn PDF document text
- http://www.mjclautrec.fr/images/roblox-free-robux-hack-download.pdfIn PDF document text
- https://www.romedia.gr/images/free-builders-club-on-roblox-2021.pdfIn PDF document text
- https://verdensbarn.no/images/free-robux-vido.pdfIn PDF document text
- http://iacovoulaw.com/images/nice-roblox-games-to-hack.pdfIn PDF document text
- http://prodent.com.ua/images/infinite-jump-roblox-download-free.pdfIn PDF document text
- https://www.academiaanticorrupcion.org/images/www-bandicam-com-roblox-hack.pdfIn PDF document text
- http://solidcommunication.ch/images/free-robux-gen-no-survey.pdfIn PDF document text
- https://www.gvandenakker.nl/images/hacking-into-roblox-accounts.pdfIn PDF document text
- https://www.air-shop.cz/images/cheat-engine-roblox-hack-jailbreak.pdfIn PDF document text
- http://ambingenieria.com/images/hi2-to-earn-free-robux-today.pdfIn PDF document text
- http://almacargo.com/images/bloxy-world-roblox-free-robux.pdfIn PDF document text
- http://gremihostaleria.cat/images/how-to-use-cheat-engine-without-roblox-shutting-down.pdfIn PDF document text
- https://www.colditex.com/images/kazuin-how-to-hack-in-roblox.pdfIn PDF document text
- http://halitbayramoglu.com.tr/images/money-cheat-retail-tycoon-roblox.pdfIn PDF document text
- https://sitam.co.in/images/roblox-supreme-hoodie-free.pdfIn PDF document text
- http://businessfit.com/images/roblox-scp-site-61-roleplay-free-morphs.pdfIn PDF document text
- https://fkg.usu.ac.id/images/roblox-script-changer-cheat.pdfIn PDF document text
- http://ff-obertraun.at/images/free-robux-new-logo-roblox.pdfIn PDF document text
- https://www.romedia.gr/images/working-free-robux-generator.pdfIn PDF document text
+20 more URL(s)
Extracted artifacts 3
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_003_off00008491.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x8491 | 26392 bytes |
SHA-256: ec2ab8bfaa87bd09c90e3992dd47a262c89f745362d62178e22bf4c7e0facf12 |
|||
font_01_sfnt_off0000c201.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xC201 | 2848 bytes |
SHA-256: 4737c2778a085e0cb49e73f3b054b1a71e3f40720d213b4bfda97f95a31bfbf1 |
|||
font_02_sfnt_off0000cbc2.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xCBC2 | 18172 bytes |
SHA-256: 327617ee46b68a702e37e7c02b6d3500bddf6f9d95cb919c1d0e746b29fb0865 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.