MALICIOUS
132
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
The PDF file contains numerous links and references to game hacks and cheats, specifically targeting popular games like Roblox. The heuristic firings indicate a link farm designed to lure users to download malicious content. The document body is populated with URLs that lead to these scam sites, suggesting a phishing or social engineering attack aimed at tricking users into compromising their accounts or downloading malware.
Machine Learning
- Nyx PDF Classifier malicious score 0.6193
Heuristics 5
-
PDF carries distributed game-hack scam link farm critical PDF_GAME_HACK_SEO_LINK_FARMPDF contains a free-generator/game-hack lure together with many external PDF links spread across distinct hosts whose filenames advertise game hacks, cheats, jailbreaks, generators, or free currency. This is a high-confidence scam/SEO-poisoning carrier: the PDF exists to route users into malicious or unwanted download/redirect chains, not to present normal document content.
-
PDF carries game-hack generator link farm medium PDF_GAME_HACK_LINK_FARMPDF contains a gaminggenerator.org app lure together with multiple external PDF links whose filenames advertise game hacks, cheats, jailbreaks, or generators. This is a lure/delivery link farm rather than a PDF exploit: the risk is the linked redirection chain.
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/roblox-admin-hack-adopt-and-raise-a-cute-kid-download PDF link annotation
- http://www.occquimica.com.br/images/free-robux-generator-hack-2021.pdfIn PDF document text
- http://medimacs.eu/images/xyrex-roblox-hack.pdfIn PDF document text
- http://dorfgaragethalwil.ch/images/roblox-hack-dll-download.pdfIn PDF document text
- https://kinderdam.nl/images/roblox-jailbreak-noclip-and-speed-hack.pdfIn PDF document text
- http://wireprod.net/images/roblox-hack-gui-tutorial.pdfIn PDF document text
- http://www.lycee-langevin-wallon.com/images/reddit-roblox-money-hacks.pdfIn PDF document text
- https://corbo.ru/images/how-to-hack-atms-in-liberty-county-roblox.pdfIn PDF document text
- http://www.zdravazena.sk/images/cual-es-el-hack-para-tener-robux-gratis-en-robolox.pdfIn PDF document text
- https://pa-waingapu.go.id/images/free-roblox-gamepasses-app.pdfIn PDF document text
- https://www.ncscolour.no/images/blackberry-hack-roblox.pdfIn PDF document text
- https://zabota-kashira.ru/images/free-robux-quick-generator.pdfIn PDF document text
- http://gitagasht.com/images/earn-free-robux-instantly.pdfIn PDF document text
- http://www.isril.it/images/avatar-roblox-skin-free.pdfIn PDF document text
- https://www.yewtreealpacas.co.uk/images/how-to-hack-oney-on-ud-roblox.pdfIn PDF document text
- http://demenagementlandry.com/images/hack-roblox-window.pdfIn PDF document text
- http://www.campiresine.it/images/como-descarar-roblox-hack-para-pc.pdfIn PDF document text
- http://soma.com.ua/images/how-to-get-the-marshmallow-head-in-roblox-for-free.pdfIn PDF document text
- https://www.stayon.no/images/free-roblox-robux-accounts-2021.pdfIn PDF document text
- http://www.oberberger.it/images/free-hats-in-roblox-2021.pdfIn PDF document text
- https://newenglandafs.com/images/free-spark-wings-on-roblox.pdfIn PDF document text
- http://ecoleduchat-grenoble.fr/images/free-robux-form-rbfarm.pdfIn PDF document text
- https://www.fhccu.com/images/free-robux-prmo-code.pdfIn PDF document text
- https://www.u-pin-it.com/images/free-robux-codes-forum.pdfIn PDF document text
- http://www.adravietnam.org/images/how-to-get-free-gamepasses-on-roblox-2021.pdfIn PDF document text
- http://www.eurologistiki.gr/images/cerberus-roblox-hack.pdfIn PDF document text
- https://yarburservices.ru/images/how-to-hack-roblox-accounts-2021-on-ipad.pdfIn PDF document text
- https://www.sitiwebjoomla.it/images/free-robux-rbx-place-rewards.pdfIn PDF document text
- https://hbln.org.au/images/how-to-get-any-catalog-item-free-roblox.pdfIn PDF document text
- https://studiodegaetano.it/images/roblox-hack-exploit-2021.pdfIn PDF document text
- http://salantiskis.lt/images/how-to-hack-roblox-dragon-ball-rage.pdfIn PDF document text
- http://biotronics.com.cy/images/free-robux-hack-give-pass.pdfIn PDF document text
- http://www.exikom.com.ua/images/2021-roblox-hacks-mac.pdfIn PDF document text
- http://ns1.radiofacil.net/images/give-me-free-robux-plz.pdfIn PDF document text
- https://sdg-trade.com/images/roblox-pastebin-free-robux.pdfIn PDF document text
- http://parkinsononline.com/images/roblox-case-clicker-coinflip-cheat.pdfIn PDF document text
- http://www.web.stc-part.co.th/images/free-robux-hack-no-bot-check.pdfIn PDF document text
- http://cadcam.no/images/roblox-car-tycoon-hacks.pdfIn PDF document text
- https://ambarevleri.com/images/christmas-tree-roblox-hack.pdfIn PDF document text
- http://leigraphics.com/images/roblox-free-catalog-items-hack.pdfIn PDF document text
- http://cmme.it/images/roblox-dungeon-quest-cheat-engine.pdfIn PDF document text
- http://kishplus.ir/images/free-roblox-hack-injector.pdfIn PDF document text
- http://legs11.co.za/images/get-free-robux-generator-parts-pokemon-silver.pdfIn PDF document text
- http://grahambettsmotors.com/images/hack-de-roblox-para-robux.pdfIn PDF document text
- http://legs11.co.za/images/how-do-you-get-robux-on-roblox-for-free-2021.pdfIn PDF document text
- http://iricamidelcuore.it/images/free-robux-click-the-button.pdfIn PDF document text
- http://techmobil.pl/images/best-roblox-scripts-to-hack-games-feree.pdfIn PDF document text
- http://www.colma.it/images/free-robux-hack-come.pdfIn PDF document text
- http://mostowicz.pl/images/guuuddinfo-online-hack-for-robux.pdfIn PDF document text
- https://www.tsdb.com.au/images/how-i-get-free-robux-meme.pdfIn PDF document text
+10 more URL(s)
Extracted artifacts 3
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_003_off000081ba.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x81BA | 25188 bytes |
SHA-256: e0ba06e106f9a4914b08d95c3959cd71d042565afa21b0808df2da6b2340d515 |
|||
font_01_sfnt_off0000bbd6.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xBBD6 | 2832 bytes |
SHA-256: 77ae1c4cffa647a8fd533dfa4102e94364989f9e80b9cd131876e9d1005899a2 |
|||
font_02_sfnt_off0000c586.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xC586 | 19056 bytes |
SHA-256: 129c26b858f051b27185f67cf9414a4176f30df893f6364523af78a30dce3b48 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.