MALICIOUS
172
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
T1204.002 Malicious Link
The PDF contains a large number of embedded URLs and a document body consisting primarily of these URLs, all related to game hacks and free virtual currency for games like Roblox. This strongly suggests a lure-based attack pattern, likely aiming to redirect users to malicious websites for scams or phishing. The ML classifier also flagged the PDF as malicious.
Machine Learning
- Nyx PDF Classifier malicious score 0.7795
Heuristics 6
-
PDF carries distributed game-hack scam link farm critical PDF_GAME_HACK_SEO_LINK_FARMPDF contains a free-generator/game-hack lure together with many external PDF links spread across distinct hosts whose filenames advertise game hacks, cheats, jailbreaks, generators, or free currency. This is a high-confidence scam/SEO-poisoning carrier: the PDF exists to route users into malicious or unwanted download/redirect chains, not to present normal document content.
-
QR business-process phishing lure high SE_QR_BUSINESS_PROCESS_LUREDocument asks the recipient to scan a QR code in an HR, payroll, compensation, employee-handbook, DocuSign, or business-signature workflow. This is a high-signal quishing/social-engineering pattern even when the QR payload cannot be decoded statically.
-
PDF carries game-hack generator link farm medium PDF_GAME_HACK_LINK_FARMPDF contains a gaminggenerator.org app lure together with multiple external PDF links whose filenames advertise game hacks, cheats, jailbreaks, or generators. This is a lure/delivery link farm rather than a PDF exploit: the risk is the linked redirection chain.
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/free-roblox-t-shirt-template PDF link annotation
- http://teknotools.net/images/how-do-you-hack-a-roblox-server.pdfIn PDF document text
- http://micromegamondo.com/images/how-do-u-get-free-robux-on-iphone.pdfIn PDF document text
- https://vtvvaals.nl/images/break-block-roblox-script-hack.pdfIn PDF document text
- http://linde-erbach.de/images/free-robux-script-pastebin-instent-in-promo-code.pdfIn PDF document text
- http://www.isovca.com/images/bloxrp-money-hack-roblox.pdfIn PDF document text
- http://santeh-40.ru/images/www-roblox-passwords-hack.pdfIn PDF document text
- http://pielab.gr/images/cheats-fr-roblox-madcyty.pdfIn PDF document text
- http://xn--hrtetechnik-steinbach-51b.de/images/roblox-hacks-name.pdfIn PDF document text
- https://gigbagwinkel.nl/images/how-to-hack-accounts-on-roblox-for-free.pdfIn PDF document text
- http://artindex.pro/images/roblox-play-free-online-now.pdfIn PDF document text
- http://ktn.com.br/images/de-roblox-hack.pdfIn PDF document text
- http://learningarabic.co.uk/images/roblox-hack-download-pc-booga-booga.pdfIn PDF document text
- http://5346000.com/images/roblox-cheat-engine-hacks-2021.pdfIn PDF document text
- http://www.lovecraftiana.com.ar/images/roblox-promocodes-hack-robux.pdfIn PDF document text
- https://cdu-lengerich.de/images/free-robux-hack-tool-download.pdfIn PDF document text
- https://www.eglihotel.gr/images/roblox-for-free-without-downloading.pdfIn PDF document text
- http://uptodate.az/images/hack-dungeon-quest-roblox-2021.pdfIn PDF document text
- http://sportagon.be/images/how-to-get-a-gamepass-on-roblox-for-free-2021.pdfIn PDF document text
- http://bagna.pl/images/free-robux-hack-pastebin.pdfIn PDF document text
- https://www.hotschool.com.au/images/how-do-i-get-free-hair-on-roblox.pdfIn PDF document text
- http://avocatultau.eu/images/how-to-hack-roblox-games-2021.pdfIn PDF document text
- https://inscastellar.cat/images/get-robux-free-button.pdfIn PDF document text
- http://salantiskis.lt/images/all-roblox-gamepasses-for-free.pdfIn PDF document text
- http://batterikungen.se/images/custom-admin-roblox-hack.pdfIn PDF document text
- http://agrao.in/images/who-type-of-roblox-hack-is-the-bes.pdfIn PDF document text
- http://naturschutzgossau-zh.ch/images/cheat-roblox-csgo.pdfIn PDF document text
- http://www.eurologistiki.gr/images/how-to-get-free-robux-using-cheat-engine-64.pdfIn PDF document text
- http://learningarabic.co.uk/images/roblox-lumber-tycoon-2-xploit-free.pdfIn PDF document text
- http://vipservice-bg.com/images/youtube-live-free-robux.pdfIn PDF document text
- http://gamixpaliwa.pl/images/free-roblox-boy-hair-not-a-model.pdfIn PDF document text
- http://columbuscigar.com/images/how-to-get-roblox-admin-hacks.pdfIn PDF document text
- https://www.rondeberg.com/images/roblox-how-to-reclaim-hacked-accounts.pdfIn PDF document text
- http://www.lycee-langevin-wallon.com/images/free-robux-if-you-join-my-group.pdfIn PDF document text
- http://www.copoint.co.uk/images/free-gametestrobloxcom-accounts.pdfIn PDF document text
- http://shapemybrows.id/images/roblox-breaking-point-hack.pdfIn PDF document text
- http://sandra-masemann.de/images/how-to-hack-money-in-roblox-games.pdfIn PDF document text
- http://ff-obertraun.at/images/how-to-bypass-roblox-with-cheat-engine-66.pdfIn PDF document text
- https://www.millatgears.com/images/get-100-000-000-000-000-000-robux-for-free.pdfIn PDF document text
- http://wcasrock.org/images/free-robux-legi.pdfIn PDF document text
- https://www.ukrtrans.biz/images/free-bc-roblox-android.pdfIn PDF document text
- http://www.occquimica.com.br/images/free-robux-hack-code-2021.pdfIn PDF document text
- http://pythonbikers.de/images/roblox-redeem-cars-free.pdfIn PDF document text
- http://mypizzaoven.com/images/easy-steps-on-how-to-get-free-robux.pdfIn PDF document text
- http://safeandsecurelocksmith.ca/images/free-robux-no-downloading-games.pdfIn PDF document text
- http://www.hawler.in/images/extension-that-give-free-robux.pdfIn PDF document text
- https://www.audev.com/images/appbounty-robux-hack.pdfIn PDF document text
- https://www.lavigny.ch/images/roblox-cheat-shinobi-origin.pdfIn PDF document text
- http://www.peterdejonge.nl/images/how-to-get-free-robux-inspect-element-2021.pdfIn PDF document text
- https://www.bmta.co.uk/images/free-roblox-neon-rideable-pet.pdfIn PDF document text
+14 more URL(s)
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_003_off00008226.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x8226 | 27816 bytes |
SHA-256: add219942680ba20f1b75401e28982a223db59ebf8bdbe3dcf3b26ca3f599079 |
|||
font_01_sfnt_off0000bf77.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xBF77 | 18236 bytes |
SHA-256: ffcab90444885c0ace4f0e1cbd81a98fd23461e88b8e62aab28aec650a478547 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.