MALICIOUS
102
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
The PDF document contains a large number of embedded URLs and links within its body, all related to "Robux hacks" and "free items" for games like Roblox. The heuristic firings confirm this is a link farm designed to lure users to scam sites. While no scripts were explicitly extracted, the nature of the content and the high number of external links suggest a phishing or scamming attempt, likely initiated via a spearphishing attachment.
Machine Learning
- Nyx PDF Classifier suspicious score 0.4394
Heuristics 5
-
PDF carries distributed game-hack scam link farm critical PDF_GAME_HACK_SEO_LINK_FARMPDF contains a free-generator/game-hack lure together with many external PDF links spread across distinct hosts whose filenames advertise game hacks, cheats, jailbreaks, generators, or free currency. This is a high-confidence scam/SEO-poisoning carrier: the PDF exists to route users into malicious or unwanted download/redirect chains, not to present normal document content.
-
PDF carries game-hack generator link farm medium PDF_GAME_HACK_LINK_FARMPDF contains a gaminggenerator.org app lure together with multiple external PDF links whose filenames advertise game hacks, cheats, jailbreaks, or generators. This is a lure/delivery link farm rather than a PDF exploit: the risk is the linked redirection chain.
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/robux-hack-whith-easy-human-verifacation PDF link annotation
- https://pa-waingapu.go.id/images/free-roblox-items-pastebin.pdfIn PDF document text
- http://www.copoint.co.uk/images/roblox-body-free.pdfIn PDF document text
- http://musical-arts.de/images/free-robux-no-survey-or-human-verification.pdfIn PDF document text
- http://smoothjazzclub.net/images/roblox-hack-mobile-download.pdfIn PDF document text
- http://eooe.gr/images/free-robux-without-human-verification-on-phone.pdfIn PDF document text
- https://rincondelentrenador.com/images/robux-hack-2021.pdfIn PDF document text
- http://ecoleduchat-grenoble.fr/images/roblox-lua-scripts-hack.pdfIn PDF document text
- http://consultinggirona.es/images/uirbx-club-hack-free-robux.pdfIn PDF document text
- http://cmme.it/images/roblox-bleu-hack.pdfIn PDF document text
- http://instrutech.co.th/images/roblox-how-to-get-free-hats-on-roblox-high-school.pdfIn PDF document text
- http://www.eurosan1.ba/images/whtch-day-dose-john-doe-hack-on-roblox.pdfIn PDF document text
- http://www.studiodamato.it/images/teleport-hack-roblox-jailbreak.pdfIn PDF document text
- http://briankellyforcongress.com/images/hacker-cloths-on-roblox.pdfIn PDF document text
- http://belagrogen.by/images/earn-robux-zone-hack.pdfIn PDF document text
- http://sandra-masemann.de/images/how-to-get-free-robux-on-computer-2021.pdfIn PDF document text
- https://www.ghknights.org/images/free-roblox-items-2021.pdfIn PDF document text
- http://hemmet-strand.dk/images/roblox-super-power-training-simulator-free-vip-ser.pdfIn PDF document text
- http://ecoleduchat-grenoble.fr/images/free-de-la-hoya-pants-roblox.pdfIn PDF document text
- http://www.nielsen2u.dk/images/free-promocode-that-gives-you-750-000-robux.pdfIn PDF document text
- http://uctovnictvosnv.sk/images/rbxvault-free-robux.pdfIn PDF document text
- http://www.awakeningtruth.org/images/how-to-hack-robux-2021-april.pdfIn PDF document text
- https://www.devries-group.de/images/free-adopt-me-flying-potion-roblox.pdfIn PDF document text
- https://amatq.ca/images/roblox-tickets-hack.pdfIn PDF document text
- https://amatq.ca/images/how-to-install-sandbags777s-eye-ball-hack-roblox.pdfIn PDF document text
- http://www.liceoantoniotoledo.com/images/how-to-get-free-spins-in-shinobi-life-roblox-125.pdfIn PDF document text
- http://www.sanjosedeminas.gob.ec/images/free-chloes-on-roblox.pdfIn PDF document text
- https://technospektr.com.ua/images/how-to-get-free-robux-on-roblox-no-hack.pdfIn PDF document text
- http://www.kalaaliaraq.dk/images/cheat-engine-hxd-roblox.pdfIn PDF document text
- http://behsanroshd.com/images/how-to-hack-roblox-top-model-wins.pdfIn PDF document text
- http://caraless.com/images/hacks-for-jailbrak-roblox.pdfIn PDF document text
- https://jdlgroup.ca/images/how-to-hack-your-friends-in-roblox.pdfIn PDF document text
- https://esl.ipb.ac.id/images/roblox-meep-city-free-games.pdfIn PDF document text
- https://www.coriglianocalabro.it/images/how-to-get-free-robux-2021-inspect.pdfIn PDF document text
- http://k2visual.com.br/images/roblox-free-robux-generator-no-survey.pdfIn PDF document text
- http://www.comitatoiseo.org/images/free-roblox-character-ideas.pdfIn PDF document text
- http://instrutech.co.th/images/roblox-builders-club-free-2021.pdfIn PDF document text
- https://www.dierenartsberghman.be/images/how-to-hack-roblox-for-robux-2021.pdfIn PDF document text
- http://gamixpaliwa.pl/images/free-mac-exploit-for-roblox.pdfIn PDF document text
- http://logisticgroup.co/images/get-free-robux-robloxcom.pdfIn PDF document text
- https://jsgwertherborgholzhausen.de/images/how-to-hack-in-roblox-to-rank-up-a-group.pdfIn PDF document text
- http://fm-express.de/images/piano-player-cheat-roblox.pdfIn PDF document text
- http://restarmenia.com/images/free-600-robux.pdfIn PDF document text
- http://bestmaids.co.uk/images/how-to-have-free-robux.pdfIn PDF document text
- http://www.fluidtech.hu/images/how-to-use-inspect-elements-to-hack-on-roblox.pdfIn PDF document text
- http://ernstgloves.co.il/images/how-to-get-robux-for-free-hack-easy.pdfIn PDF document text
- https://www.millatgears.com/images/roblox-free-robux-exploit.pdfIn PDF document text
- http://alexanderautos.co/images/roblox-free-robux-no-real-money.pdfIn PDF document text
- http://www.brtes.com/images/free-black-hair-roblox.pdfIn PDF document text
- http://jwcrownlimo.net/images/hack-de-robux-2021.pdfIn PDF document text
+14 more URL(s)
Extracted artifacts 3
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
font_00_sfnt_off00008546.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x8546 | 29064 bytes |
SHA-256: 6777e2b7593b3d2e61b8ee51077f83c00e71827c18acacb733ee51ff19502ded |
|||
font_01_sfnt_off0000c756.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xC756 | 2832 bytes |
SHA-256: 77ae1c4cffa647a8fd533dfa4102e94364989f9e80b9cd131876e9d1005899a2 |
|||
font_02_sfnt_off0000d106.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xD106 | 19296 bytes |
SHA-256: 36b47d342a0935d13bfb69cbdfcc5410013aa870a56f994b6ef24e2cfcab5eaf |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.