MALICIOUS
132
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
T1204.002 Malicious Link
The PDF document contains a large number of embedded links, primarily pointing to websites that promise game hacks and free virtual currency, such as 'robux'. This strongly suggests a scam or phishing attempt designed to lure users to malicious sites. The ML classifier also flagged the PDF as malicious.
Machine Learning
- Nyx PDF Classifier malicious score 0.6193
Heuristics 5
-
PDF carries distributed game-hack scam link farm critical PDF_GAME_HACK_SEO_LINK_FARMPDF contains a free-generator/game-hack lure together with many external PDF links spread across distinct hosts whose filenames advertise game hacks, cheats, jailbreaks, generators, or free currency. This is a high-confidence scam/SEO-poisoning carrier: the PDF exists to route users into malicious or unwanted download/redirect chains, not to present normal document content.
-
PDF carries game-hack generator link farm medium PDF_GAME_HACK_LINK_FARMPDF contains a gaminggenerator.org app lure together with multiple external PDF links whose filenames advertise game hacks, cheats, jailbreaks, or generators. This is a lure/delivery link farm rather than a PDF exploit: the risk is the linked redirection chain.
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/roblox-hacks-thumbnails PDF link annotation
- http://museumkk.ru/images/roblox-hack-robux-no-human-verification-2021.pdfIn PDF document text
- http://cosver.eu/images/vermillion-hack-roblox.pdfIn PDF document text
- http://gops.pruszczgdanski.pl/images/robux-hack-2021-no-download.pdfIn PDF document text
- http://grupodin.com.br/images/free-avatar-maker-roblox.pdfIn PDF document text
- http://bi-bordtennis.dk/images/roblox-noob-outfit-for-free.pdfIn PDF document text
- http://scuttworksdesigns.us/images/how-to-be-a-member-on-roblox-for-free.pdfIn PDF document text
- https://www.laarsenco.nl/images/how-to-hack-dumb-brothers-roblox-accounts-easy.pdfIn PDF document text
- https://ghpa.ru/images/discord-servers-that-give-free-robux.pdfIn PDF document text
- http://fiur-malermeister.de/images/how-to-get-free-robux-without-downloading-any-apps.pdfIn PDF document text
- http://posterprintshop.nl/images/free-robux-giveaway-now.pdfIn PDF document text
- http://escolaarboc.cat/images/roblox-pokemon-brick-bronze-hacked-version.pdfIn PDF document text
- http://xn----7sbabhw4a8b0addm1c.xn--p1ai/images/roblox-free-item-generator.pdfIn PDF document text
- http://reisebild.eu/images/are-roblox-emotes-free.pdfIn PDF document text
- https://socialvalue.gr/images/free-robux-youtube-channel.pdfIn PDF document text
- https://www.stadtbesichtigungen.de/images/put-cheat-codes-roblox-bubblegum.pdfIn PDF document text
- https://www.coriglianocalabro.it/images/how-to-get-builders-club-for-free-on-roblox-2021.pdfIn PDF document text
- http://bkd1.balikpapan.go.id/images/free-roblox-blue-hair-com.pdfIn PDF document text
- http://zarinnameh.ir/images/roblox-cheats-for-robux-and-tix-2021.pdfIn PDF document text
- http://wcasrock.org/images/wwwroblox-cheatgdn.pdfIn PDF document text
- https://www.coriglianocalabro.it/images/best-free-robux-hack.pdfIn PDF document text
- https://septik-montag.ru/images/free-robux-generator-2021-hack.pdfIn PDF document text
- http://agrao.in/images/how-to-hack-strength-in-roblox.pdfIn PDF document text
- http://batutynas.lt/images/how-to-hack-roblox-accounts-2021-may.pdfIn PDF document text
- http://imp.lg.ua/images/free-robux-legit-2021.pdfIn PDF document text
- https://www.lavigny.ch/images/free-robux-guy.pdfIn PDF document text
- http://www.jureclomas.com.ar/images/ccv3-roblox-hack.pdfIn PDF document text
- http://stitchingart.com/images/extreme-injector-hack-roblox.pdfIn PDF document text
- https://rieber-transporte.de/images/roblox-high-school-free-boombox.pdfIn PDF document text
- https://corbo.ru/images/roblox-face-hacks.pdfIn PDF document text
- http://www.zdravazena.sk/images/roblox-money-cheat-code.pdfIn PDF document text
- http://internetdeputy.com/images/roblox-how-to-have-free-obc.pdfIn PDF document text
- http://halitbayramoglu.com.tr/images/how-to-get-free-1-million-robux-new.pdfIn PDF document text
- https://www.audev.com/images/free-robux-generator-only-enter-password.pdfIn PDF document text
- http://portal.crfsp.org.br/images/how-to-hightspeed-roblox-with-cheat-engine-windows-10-universal.pdfIn PDF document text
- https://estalagemmonteverde.com.br/images/free-shirt-roblox-boy.pdfIn PDF document text
- http://e-mailservis.cz/images/roblox-free-clothes-hack-2021.pdfIn PDF document text
- https://www.fhccu.com/images/how-to-get-free-robux-in-roblox-2021-may.pdfIn PDF document text
- http://mydevice.com.au/images/elemental-battlegrounds-roblox-hacks.pdfIn PDF document text
- http://www.remiauclair.fr/images/free-promo-codes20219-for-roblox.pdfIn PDF document text
- http://artindex.pro/images/roblox-r7-hack-2021.pdfIn PDF document text
- http://www.awakeningtruth.org/images/roblox-music-hack.pdfIn PDF document text
- http://www.exikom.com.ua/images/roblox-forcefield-hack.pdfIn PDF document text
- http://www.mjclautrec.fr/images/roblox-hack-ipad-no-human-verification.pdfIn PDF document text
- http://pa-tanjungselor.go.id/images/how-to-get-free-robux-2021-easy-on-ipad.pdfIn PDF document text
- http://sscclc.edu.ec/images/free-robux-dont-get-anything-from-survey-varification.pdfIn PDF document text
- http://www.marambio.com.ar/images/can-someone-hack-my-roblox.pdfIn PDF document text
- https://www.stoehr-sauer.de/images/free-robux-roblox-hack-no-survey-no-human-verification-2021.pdfIn PDF document text
- http://sscclc.edu.ec/images/free-h-robux.pdfIn PDF document text
- https://jdlgroup.ca/images/da-hood-pitchfork-hack-roblox.pdfIn PDF document text
+13 more URL(s)
Extracted artifacts 3
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_003_off0000814f.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x814F | 27176 bytes |
SHA-256: 56dfe12c23b448f669be97828c2e072006d3736de6431b2f923d601b4c7a0642 |
|||
font_01_sfnt_off0000bf2b.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xBF2B | 3884 bytes |
SHA-256: 40b61f8938bd710dc29dc58ba3fde91c245a6a69596ec569b4d27c769ca417cf |
|||
font_02_sfnt_off0000cbd2.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xCBD2 | 18312 bytes |
SHA-256: 654f97e016bab6aa6818a540ecf438dd2dda07ad81d740a0d3efd9a2e7792fad |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.