MALICIOUS
132
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
The PDF file contains a large number of embedded URLs, many of which are associated with game hacking and free in-game currency scams, specifically targeting games like Roblox. The heuristic firings confirm this is a link farm designed to lure users with promises of hacks and cheats. While no scripts were extracted, the document's structure and content strongly suggest a phishing or scamming attempt, likely leading users to malicious websites or further download stages.
Machine Learning
- Nyx PDF Classifier malicious score 0.6193
Heuristics 5
-
PDF carries distributed game-hack scam link farm critical PDF_GAME_HACK_SEO_LINK_FARMPDF contains a free-generator/game-hack lure together with many external PDF links spread across distinct hosts whose filenames advertise game hacks, cheats, jailbreaks, generators, or free currency. This is a high-confidence scam/SEO-poisoning carrier: the PDF exists to route users into malicious or unwanted download/redirect chains, not to present normal document content.
-
PDF carries game-hack generator link farm medium PDF_GAME_HACK_LINK_FARMPDF contains a gaminggenerator.org app lure together with multiple external PDF links whose filenames advertise game hacks, cheats, jailbreaks, or generators. This is a lure/delivery link farm rather than a PDF exploit: the risk is the linked redirection chain.
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/quick-way-to-get-robux-hack PDF link annotation
- http://hondenspecialist-engelien.nl/images/roblox-hack-mobile-download.pdfIn PDF document text
- https://www.eglihotel.gr/images/roblox-hacking-kazuin.pdfIn PDF document text
- http://teknotools.net/images/how-do-people-hack-roblox-accountsx.pdfIn PDF document text
- http://lcs-schlieben.de/images/roblox-weight-lifting-simulator-hacks.pdfIn PDF document text
- https://www.hotschool.com.au/images/free-robux-too-no-verification.pdfIn PDF document text
- http://www.comitatoiseo.org/images/roblox-tycoon-money-cheat.pdfIn PDF document text
- https://tokunfome.com.br/images/rpg-world-hack-roblox.pdfIn PDF document text
- http://peche-madagascar.com/images/free-roblox-open-groups.pdfIn PDF document text
- http://iricamidelcuore.it/images/roblox-jailbreak-free-moneycom.pdfIn PDF document text
- http://www.maakherumusic.net/images/roblox-pet-simulator-cheat-engine.pdfIn PDF document text
- http://poltekkeskhjogja.ac.id/images/hack-any-roblox-account-program.pdfIn PDF document text
- http://brinicombe.co.uk/images/hacker-programm-roblox.pdfIn PDF document text
- http://www.teapotjewelry.com/images/como-tener-robux-gratis-con-hacks.pdfIn PDF document text
- http://ohsawamacrobiotics.com/images/roblox-sand-simulator-infinite-backpack-code-hack.pdfIn PDF document text
- https://seedungo.com/images/free-robux-web-store.pdfIn PDF document text
- https://masseymotorcars.com/images/roblox-hack-menu-jailbreak.pdfIn PDF document text
- http://www.cuniv-naama.dz/images/hot-to-hack-roblox-on-mac.pdfIn PDF document text
- https://masseymotorcars.com/images/5-easy-ways-to-get-free-robux.pdfIn PDF document text
- http://ehma.com/images/can-we-play-roblox-for-free.pdfIn PDF document text
- http://amtabor2.at/images/how-to-get-free-commends-on-roblox-innovation.pdfIn PDF document text
- https://www.lomrad.go.th/images/roblox-swordburst-2-speed-hack.pdfIn PDF document text
- http://energotestcontrol.ru/images/roblox-shinobi-story-cheat-script.pdfIn PDF document text
- http://www.homesweethome.pl/images/free-pants-for-roblox.pdfIn PDF document text
- https://europainstitut.hu/images/kram-barry-roblox-hack.pdfIn PDF document text
- https://www.dierenartsberghman.be/images/how-to-hack-roblox-with-cheat-engine.pdfIn PDF document text
- https://www.lavigny.ch/images/descargar-hacks-para-roblox-gratis.pdfIn PDF document text
- http://genialica.de/images/new-cheat-codes-for-pets-adopt-me-on-roblox.pdfIn PDF document text
- http://icomsolutions.com.au/images/free-app-roblox-play-as-a-guest.pdfIn PDF document text
- https://www.audev.com/images/hack-para-phantom-forces-roblox-2021.pdfIn PDF document text
- http://nosocomium.rv.ua/images/cheat-lumber-tycoon-2-roblox-rain.pdfIn PDF document text
- http://www.ntc.edu.za/images/is-it-illegal-to-hack-on-roblox.pdfIn PDF document text
- http://www.sapaengineering.kz/images/free-robux-obby-with-out-liking-it.pdfIn PDF document text
- http://linde-erbach.de/images/roblox-account-hacked-and-pin-set.pdfIn PDF document text
- http://ns1.radiofacil.net/images/legends-of-speed-cheats-roblox.pdfIn PDF document text
- http://www.boic.nl/images/complete-an-action-for-free-robux.pdfIn PDF document text
- http://ghegamethu.vn/images/roblox-code-card-free-sin-verification.pdfIn PDF document text
- https://www.stkdb.cz/images/how-to-get-speed-hacks-on-roblox.pdfIn PDF document text
- http://rafaelmontesinos.com/images/trucos-para-free-vip-ultimatesurvival-rpg-roblox.pdfIn PDF document text
- https://jsgwertherborgholzhausen.de/images/redeem-card-2021-robux-free.pdfIn PDF document text
- http://feuerwehr-rheinau.de/images/free-robux-no-password-needed.pdfIn PDF document text
- http://sauer-umweltservice.de/images/free-dll-scrips-for-roblox.pdfIn PDF document text
- https://www.manisoft.ir/images/actual-free-robux-fast.pdfIn PDF document text
- http://greasley.website/images/roblox-hack-accounts-generator.pdfIn PDF document text
- https://www.ghknights.org/images/free-roblox-items-2021.pdfIn PDF document text
- http://www.fanciullovito.it/images/roblox-cheat-engine-shut-down-server.pdfIn PDF document text
- http://mydevice.com.au/images/free-roblox-death-sound-effect.pdfIn PDF document text
- https://open-coffee-drimmelen-geertruidenberg.nl/images/como-descargar-hacks-de-roblox.pdfIn PDF document text
- http://www.thecoffeebaron.co.za/images/kids-58-robux-hack.pdfIn PDF document text
- http://www.boic.nl/images/cheat-engine-speed-hack-roblox-2021.pdfIn PDF document text
+18 more URL(s)
Extracted artifacts 3
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_003_off000084c7.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x84C7 | 25416 bytes |
SHA-256: 339f8ee8970725b206f533f98956f9f384d9ef64b74584cbc0f35f000bf8269b |
|||
font_01_sfnt_off0000bf3d.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xBF3D | 2848 bytes |
SHA-256: 4737c2778a085e0cb49e73f3b054b1a71e3f40720d213b4bfda97f95a31bfbf1 |
|||
font_02_sfnt_off0000c8fe.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xC8FE | 18224 bytes |
SHA-256: 3a06c3ca8294079e6b09fd249665e8071af9cad9d7d0142723513354999c1933 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.