MALICIOUS
132
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
T1204.002 Malicious Link
The PDF contains numerous links and text fragments related to game hacks and free virtual currency, specifically for Roblox. The primary heuristic indicates a 'game-hack scam link farm' with a high number of distinct hosts and lures. The document body confirms this by repeating many of the scam URLs, aiming to direct users to malicious websites.
Machine Learning
- Nyx PDF Classifier malicious score 0.7795
Heuristics 5
-
PDF carries distributed game-hack scam link farm critical PDF_GAME_HACK_SEO_LINK_FARMPDF contains a free-generator/game-hack lure together with many external PDF links spread across distinct hosts whose filenames advertise game hacks, cheats, jailbreaks, generators, or free currency. This is a high-confidence scam/SEO-poisoning carrier: the PDF exists to route users into malicious or unwanted download/redirect chains, not to present normal document content.
-
PDF carries game-hack generator link farm medium PDF_GAME_HACK_LINK_FARMPDF contains a gaminggenerator.org app lure together with multiple external PDF links whose filenames advertise game hacks, cheats, jailbreaks, or generators. This is a lure/delivery link farm rather than a PDF exploit: the risk is the linked redirection chain.
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/jugar-roblox-hackeado-online PDF link annotation
- http://principessalialaofegypt.com/images/hot-to-get-real-robux-for-free.pdfIn PDF document text
- http://bernd-voehringer.de/images/roblox-phantom-forces-hack-million.pdfIn PDF document text
- http://www.hawler.in/images/como-hackear-roblox-en-android.pdfIn PDF document text
- https://www.elevage-chiot.fr/images/free-roblox-cards-codes-2021.pdfIn PDF document text
- http://modenese.net/images/easy-hacks-to-get-robux.pdfIn PDF document text
- https://pa-waingapu.go.id/images/roblox-hack-free-robux-amp.pdfIn PDF document text
- https://www.acoustiguard.com/images/roblox-prison-life-noclip-hack.pdfIn PDF document text
- http://dshikr.ru/images/roblox-pokemon-go-2-cheats.pdfIn PDF document text
- http://www.teapotjewelry.com/images/game-roblox-free-download.pdfIn PDF document text
- https://gastroration.ru/images/thebesian-get-free-robux-roblox.pdfIn PDF document text
- http://britishcomics.com/images/how-to-hack-robux-on-roblox-2021.pdfIn PDF document text
- http://halitbayramoglu.com.tr/images/how-to-hack-roblox-adopt-me.pdfIn PDF document text
- http://kermas.eu/images/how-to-hack-and-on-roblox-on-muderer-mistery-2.pdfIn PDF document text
- http://www.gadanie.lv/images/join-and-earn-free-robux.pdfIn PDF document text
- https://www.lomrad.go.th/images/roblox-unlimited-money-hack.pdfIn PDF document text
- http://www.nielsen2u.dk/images/code-cheat-card-roblox.pdfIn PDF document text
- http://www.gongoff.com/images/best-free-injectors-for-roblox.pdfIn PDF document text
- http://www.friendshiptransport.net/images/hack-para-hackear-cuentas-de-roblox.pdfIn PDF document text
- http://global-tech-security.be/images/free-robux-no-hsck.pdfIn PDF document text
- http://rosbk.ro/images/hack-for-roblox-in-jail-break.pdfIn PDF document text
- http://www.pcclawyers.com.au/images/royale-high-roblox-free-diamonds.pdfIn PDF document text
- https://www.hofe-gmbh.de/images/how-to-get-free-robux-and-tix-on-roblox-2021.pdfIn PDF document text
- https://www.utalii.ac.ke/images/free-roblox-backdoor.pdfIn PDF document text
- http://www.kalaaliaraq.dk/images/roblox-free-sword-gear.pdfIn PDF document text
- http://infoagronomia.com.ar/images/roblox-hack-mago.pdfIn PDF document text
- http://uptodate.az/images/how-to-hack-roblox-aimbot.pdfIn PDF document text
- http://eau-petit-pont.com/images/ive-been-hacked-on-roblox-what-now.pdfIn PDF document text
- http://www.sitiamministrabili.it/images/robux-cheaten-in-roblox.pdfIn PDF document text
- http://www.eurologistiki.gr/images/synapse-roblox-hack-dll.pdfIn PDF document text
- http://finalstand.org/images/how-to-get-free-robux-on-chromebook-2021.pdfIn PDF document text
- http://grupodin.com.br/images/nascar-17-roblox-cheats.pdfIn PDF document text
- https://uofk.edu/images/como-conseguir-robux-gratis-sin-hacks-2021.pdfIn PDF document text
- http://asiasieja.pl/images/hacking-denis-daily-roblox.pdfIn PDF document text
- http://salantiskis.lt/images/lila-plays-free-robux.pdfIn PDF document text
- http://www.zdravazena.sk/images/free-roblox-promo-codes-2021-february.pdfIn PDF document text
- http://uptodate.az/images/do-do-you-get-robux-for-free.pdfIn PDF document text
- http://hk-kan.org/images/free-robux-2021.pdfIn PDF document text
- http://iedarelief.us/images/how-to-get-100-free-robux-on-roblox-2021.pdfIn PDF document text
- http://www.nicoifruttidelchicco.org/images/play-roblox-for-free-online-now.pdfIn PDF document text
- http://joshherman.com/images/everything-free-in-roblox.pdfIn PDF document text
- http://innovativefs.co.uk/images/exploit-hacks-for-roblox.pdfIn PDF document text
- http://echosvoix.ch/images/free-cam-script-roblox-v3rmillion.pdfIn PDF document text
- https://www.lomrad.go.th/images/how-to-get-free-robux-melissa.pdfIn PDF document text
- https://ballaratcaravans.com.au/images/how-to-get-free-robux-2021.pdfIn PDF document text
- https://www.seeingindependence.org/images/how-to-inject-dll-roblox-hack.pdfIn PDF document text
- http://internetdeputy.com/images/roblox-how-to-change-your-name-for-free-2021.pdfIn PDF document text
- http://www.oberberger.it/images/free-robux-nowcom.pdfIn PDF document text
- https://www.abrapppe.org.br/images/roblox-hack-tool-free-download-no-survey-no-password.pdfIn PDF document text
- https://www.utalii.ac.ke/images/gainblox-gg-free-robux.pdfIn PDF document text
+8 more URL(s)
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_003_off000081f3.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x81F3 | 29348 bytes |
SHA-256: 33f30844bfacb1e227dadfea9ac6764887a08909ecb38b1ade46fa95cc3a58ef |
|||
font_01_sfnt_off0000c3cb.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xC3CB | 18604 bytes |
SHA-256: 1c713ec7c2b7e31a1fcbc42a2240c7aa762f218d7198511f12ba40cbf3545b1c |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.