MALICIOUS
82
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
The PDF document contains numerous links and a call-to-action phrase, heavily suggesting a lure for users interested in game hacks and free items. The primary link, 'https://enigmagenerator.com/app/431946152/roblox-game-hack', is flagged as a high-risk redirector. The ML classifier also flagged this PDF as malicious, supporting the conclusion that it is designed to lead users to potentially harmful content.
Machine Learning
- Nyx PDF Classifier malicious score 0.8852
Heuristics 4
-
PDF links to a 'free generator / game hack' redirector high PDF_GAME_HACK_REDIRECT_LUREPDF's clickable action targets a redirector of the form /app/<id>/<slug>-game-hack — the landing-page shape of a large SEO 'free spins / generator / game hack' lure family that funnels victims through rotating disposable hosts to a malware/scam payload. The multi-link variants also trip ML/link-farm rules; this catches the single-link variants that otherwise score clean.
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL https://enigmagenerator.com/app/431946152/roblox-game-hack PDF link annotation
- https://www.sauvonsleclimat.org/images/hack-for-pet-simulator-roblox.pdfIn PDF document text
- http://eventoslanoria.com/images/invisibility-hacks-roblox.pdfIn PDF document text
- http://thomas-hartl.at/images/free-roblox-girl-shirts.pdfIn PDF document text
- http://gamixpaliwa.pl/images/roblox-redeem-free-robux.pdfIn PDF document text
- http://killebergsridsport.se/images/free-robux-codesus.pdfIn PDF document text
- http://columbuscigar.com/images/doomsdire-battle-roblox-hack.pdfIn PDF document text
- http://www.sapaengineering.kz/images/visea-descargar-hack-roblox.pdfIn PDF document text
- http://www.art-concept.gr/images/shinobi-life-roblox-hack-onyx-2021.pdfIn PDF document text
- https://brainpads.com/images/infinite-robux-hack-2021.pdfIn PDF document text
- http://gestibrok.com/images/how-to-get-free-robux-on-computer-no-survey.pdfIn PDF document text
- http://www.kalaaliaraq.dk/images/roblox-walk-through-walls-hack-no-cheat-engine.pdfIn PDF document text
- http://portal.crfsp.org.br/images/robux-hack-today.pdfIn PDF document text
- http://cofys.nl/images/click-for-free-robux-png.pdfIn PDF document text
- http://adenmarks.se/images/hacks-for-roblox-apps.pdfIn PDF document text
- http://www.fanciullovito.it/images/how-to-look-like-a-hacker-in-roblox.pdfIn PDF document text
- http://www.exikom.com.ua/images/free-100-robux-2021.pdfIn PDF document text
- https://www.fhccu.com/images/how-to-get-free-robux-fast-2021.pdfIn PDF document text
- https://allpi.int/images/2021-roblox-reach-hacks.pdfIn PDF document text
- http://www.nielsen2u.dk/images/hack-para-tener-robux-2021.pdfIn PDF document text
- http://www.das-kinderzimmer.net/images/how-to-have-free-hair-in-roblox.pdfIn PDF document text
- http://pasqualeferorelli.it/images/a-game-were-you-can-get-free-robux-roblox.pdfIn PDF document text
- http://iricamidelcuore.it/images/anime-cross-2-hack-roblox.pdfIn PDF document text
- http://hocquaux.fr/images/hackear-roblox-robux-gratis.pdfIn PDF document text
- http://escolaarboc.cat/images/fidget-knot-free-robux.pdfIn PDF document text
- http://www.liceoantoniotoledo.com/images/roblox-swat-free.pdfIn PDF document text
- http://bullyinformate.org/images/how-to-hack-roblox-accounts-with-command-prompt.pdfIn PDF document text
- http://kruiz21.ru/images/how-to-hack-roblox-accounts-2021-unpatched.pdfIn PDF document text
- http://grugliascogiovani.org/images/how-to-hack-any-roblox-account-including-admins.pdfIn PDF document text
- https://bapalaye.org/images/roblox-pc-hacks-for-free.pdfIn PDF document text
- http://xn-----clcdhzcbmgnochhb1boe1a6b.xn--p1ai/images/hack-apk-roblox.pdfIn PDF document text
- https://www.tsdb.com.au/images/how-to-cheat-robux-in-roblox-2021.pdfIn PDF document text
- https://bdsm-centrum.com/images/hack-roblox-how-to-be-dark-veder-in-wild-west.pdfIn PDF document text
- http://muckrossparkcollege.com/images/how-to-get-free-tshirt-roblox.pdfIn PDF document text
- http://www.rezbb.sk/images/how-to-get-free-robux-on-roblox-android-2021.pdfIn PDF document text
- https://www.hbproducts.dk/images/free-robux-generator-meme.pdfIn PDF document text
- http://www.oberberger.it/images/free-t-shirt-roblox-2021.pdfIn PDF document text
- http://ivalor.fr/images/roblox-prison-lifewall-hacking-2021.pdfIn PDF document text
- https://www.fenews.co.uk/images/roblox-free-online-login.pdfIn PDF document text
- https://www.manisoft.ir/images/free-roblox-accounts-with-obc-2021.pdfIn PDF document text
- http://www.colledellaselva.it/images/how-to-hack-tnt-rush-roblox-cheat-engine.pdfIn PDF document text
- https://www.ergolight.at/images/how-to-get-free-robux-meme.pdfIn PDF document text
- http://askueandco.com/images/best-roblox-jailbreak-hack-2021.pdfIn PDF document text
- http://www.fluidtech.hu/images/how-to-get-free-robux-no-verification-2021.pdfIn PDF document text
- http://wokbaarlo.nl/images/how-to-get-2021000-robux-for-free-in-roblox.pdfIn PDF document text
- http://bibliotheque-perrigny-les-dijon.fr/images/fr-ee-hacks-for-roblox.pdfIn PDF document text
- https://www.sitiwebjoomla.it/images/more-robux-for-free-no-verification.pdfIn PDF document text
- http://aviaprofsoyuz.info/images/roblox-mobile-cheat-codes.pdfIn PDF document text
- http://www.ntc.edu.za/images/roblox-hack-tool-download-pc.pdfIn PDF document text
- http://torkelson.se/images/dantdm-get-fre-robux.pdfIn PDF document text
+15 more URL(s)
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_003_off00006cff.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x6CFF | 25568 bytes |
SHA-256: 456a050523e82348c83c9a0d8e9de9432055e055b333e0c6d96ff03acd4e7ced |
|||
font_01_sfnt_off0000a7a6.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xA7A6 | 18680 bytes |
SHA-256: bda521d14c89c6f9c39a0869308a9f40dcd0a2ad10b89816cff4bdefa4a35af2 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.