MALICIOUS
132
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
T1204.002 Malicious Link
The PDF file contains a large number of embedded URLs, identified by the PDF_GAME_HACK_SEO_LINK_FARM heuristic, that lead to websites promising free Robux and game hacks. These links are likely part of a scam or phishing operation designed to trick users into visiting malicious sites or downloading further malware. No scripts were extracted from this sample.
Machine Learning
- Nyx PDF Classifier malicious score 0.9723
Heuristics 5
-
PDF carries distributed game-hack scam link farm critical PDF_GAME_HACK_SEO_LINK_FARMPDF contains a free-generator/game-hack lure together with many external PDF links spread across distinct hosts whose filenames advertise game hacks, cheats, jailbreaks, generators, or free currency. This is a high-confidence scam/SEO-poisoning carrier: the PDF exists to route users into malicious or unwanted download/redirect chains, not to present normal document content.
-
PDF carries game-hack generator link farm medium PDF_GAME_HACK_LINK_FARMPDF contains a gaminggenerator.org app lure together with multiple external PDF links whose filenames advertise game hacks, cheats, jailbreaks, or generators. This is a lure/delivery link farm rather than a PDF exploit: the risk is the linked redirection chain.
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/how-to-get-free-robux-with-inspect-element-2021 PDF link annotation
- http://www.rezbb.sk/images/free-roblox-royale-high.pdf%0AIn PDF document text
- http://nevesomost.by/images/infinite-health-roblox-cheat-engine.pdf%0AIn PDF document text
- http://bkd1.balikpapan.go.id/images/how-to-hack-on-cbro-roblox.pdf%0AIn PDF document text
- https://www.elevage-chiot.fr/images/roblox-jailbreak-cheats-xbox-one.pdf%0AIn PDF document text
- https://www.elevage-chiot.fr/images/roblox-hack-robux-official-site.pdf%0AIn PDF document text
- http://www.lionel-seppoloni.fr/images/how-to-get-free-robux-no-verification-2021-trackid-sp006.pdf%0AIn PDF document text
- http://kruiz21.ru/images/roblox-lumber-tycoon-2-map-xbox-one-cheats.pdf%0AIn PDF document text
- http://echosvoix.ch/images/5-games-that-promise-free-robux.pdf%0AIn PDF document text
- https://www.porthos.it/images/how-to-hack-roblox-accounts-with-edit-this-cookie-2021.pdf%0AIn PDF document text
- http://svp-steinmaur.ch/images/free-robux-and-bc-generator.pdf%0AIn PDF document text
- http://www.agri-tech.com.au/images/https-www-roblox-com-free-robux.pdf%0AIn PDF document text
- https://www.ghknights.org/images/roblox-royale-high-free-vip-server.pdf%0AIn PDF document text
- http://www.evaplast.by/images/roblox-town-factory-cheats.pdf%0AIn PDF document text
- http://pa-tanjungselor.go.id/images/roblox-hack-menu-jailbreak-774.pdf%0AIn PDF document text
- http://svp-steinmaur.ch/images/hacks-para-roblox-descargar.pdf%0AIn PDF document text
- https://gomsa.nl/images/free-robux-gift-card-cods.pdf%0AIn PDF document text
- https://www.eglihotel.gr/images/how-to-get-400-robux-for-free.pdf%0AIn PDF document text
- http://www.kalaaliaraq.dk/images/how-to-hack-a-roblox-account-no-bullshit.pdf%0AIn PDF document text
- https://pemadamapi.net/images/hack-comment-avoire-des-objets-gratuits-roblox.pdf%0AIn PDF document text
- http://aeroclub-kaernten.at/images/how-to-hack-roblox-wls2.pdf%0AIn PDF document text
- https://esl.ipb.ac.id/images/roblox-sans-hack.pdf%0AIn PDF document text
- http://www.hawler.in/images/how-to-hack-into-your-roblox-account-without-the-password.pdf%0AIn PDF document text
- http://www.sapaengineering.kz/images/how-can-you-get-robux-for-free-on-roblox.pdf%0AIn PDF document text
- http://www.kalaaliaraq.dk/images/free-robux-computer-2021.pdf%0AIn PDF document text
- http://kids-academy.pl/images/roblox-pants-free.pdf%0AIn PDF document text
- http://www.sanjosedeminas.gob.ec/images/fps-hacks-roblox-aimbot-how-to-activate-ambot.pdf%0AIn PDF document text
- https://www.milewood.co.uk/images/free-promo-codes-roblox-not-expired.pdf%0AIn PDF document text
- http://www.ntc.edu.za/images/free-shirt-templates-on-roblox.pdf%0AIn PDF document text
- http://www.web.stc-part.co.th/images/roblox-cheat-engine-murder-mystery.pdf%0AIn PDF document text
- http://www.zdravazena.sk/images/robux-hack-without-verification.pdf%0AIn PDF document text
- http://en.wikipedia.org/wiki/MIT_LicenseIn extracted file (font_00_sfnt_off000034ce.bin)
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
font_00_sfnt_off000034ce.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x34CE | 19700 bytes |
SHA-256: aace53cb62736002453ef47fa5e2a8f06abd728fd2c4605940f518b626729ffe |
|||
font_01_sfnt_off00005e06.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x5E06 | 19404 bytes |
SHA-256: b27994dfb812e9a39caab2b5ac0b2d804633669360076ddf12d8ef8cc619bf6d |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.