MALICIOUS
72
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
The file is identified as malicious by ClamAV with a specific phishing signature related to Roblox. It contains an external URI pointing to a site offering a 'Bit Slicer Roblox Infinity Jump Hack', suggesting a lure for users interested in game cheats. The presence of numerous similar PDF URLs further supports a phishing or malware distribution campaign.
Machine Learning
- Nyx PDF Classifier suspicious score 0.3043
Heuristics 4
-
ClamAV: Pdf.Phishing.Roblox062100-9873116-0 critical CLAMAV_DETECTIONClamAV detected this file as malware: Pdf.Phishing.Roblox062100-9873116-0
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/bit-slicer-roblox-infinity-jump-hack PDF link annotation
- http://musical-arts.de/images/free-roblox-accounts-made-50-days-old.pdfIn PDF document text
- https://yarburservices.ru/images/roblox-robux-hack-tool-no-survey.pdfIn PDF document text
- https://estalagemmonteverde.com.br/images/hack-no-problem-with-download-roblox.pdfIn PDF document text
- http://arch-centr.ru/images/roblox-nike-free-auttaucollant.pdfIn PDF document text
- http://asiashop-france.fr/images/broken-bones-roblox-cheats.pdfIn PDF document text
- http://malichy.pl/images/cheat-codes-for-tuber-simulator-roblox.pdfIn PDF document text
- https://reggieslockandkey.com/images/free-reedeem-codes-roblox.pdfIn PDF document text
- https://gestionpatrimonial.net/images/www-free-robux-partycom.pdfIn PDF document text
- http://businessfit.com/images/roblox-plane-free.pdfIn PDF document text
- http://technologicalsc.com/images/roblox-murder-mystery-2-hack-exploit.pdfIn PDF document text
- http://lanoblaie.fr/images/roblox-hack-strucid.pdfIn PDF document text
- http://ferienwohnung-walker.de/images/free-robux-icu.pdfIn PDF document text
- http://www.drent.se/images/hacked-my-instagram-roblox-id.pdfIn PDF document text
- https://www.hbproducts.dk/images/free-robux-t.pdfIn PDF document text
- http://linde-erbach.de/images/roblox-alone-hack-script.pdfIn PDF document text
- http://www.lascalamilanowallcovering.it/images/roblox-hack-account-real.pdfIn PDF document text
- https://bapalaye.org/images/free-roblox-stuff-2021.pdfIn PDF document text
- http://www.gadanie.lv/images/roblox-health-hack-cheat-engine.pdfIn PDF document text
- https://www.stkdb.cz/images/cheat-roblox-2021-btools.pdfIn PDF document text
- http://www.prylfabriken.se/images/how-to-get-free-hair-roblox.pdfIn PDF document text
- https://arcasict.nl/images/how-to-hack-roblox-prison-life-v2-02.pdfIn PDF document text
- http://soma.com.ua/images/hacking-roblox-zombie.pdfIn PDF document text
- http://www.cosver.nl/images/roblox-robux-hackercom.pdfIn PDF document text
- http://evro-okna.net/images/robux-hack-download-app.pdfIn PDF document text
- http://daksz.hu/images/cheats-for-rake-classic-edition-roblox.pdfIn PDF document text
- http://cadcam.no/images/best-free-roblox-schirts.pdfIn PDF document text
- http://centuriatus.com/images/roblox-how-to-hack-gravity-with-cheat-engine.pdfIn PDF document text
- https://newenglandafs.com/images/turtle-roblox-hack.pdfIn PDF document text
- https://www.fhccu.com/images/make-your-own-roblox-shirt-free.pdfIn PDF document text
- http://www.arredifunebri.com/images/free-robux-computer-only.pdfIn PDF document text
- http://en.wikipedia.org/wiki/MIT_LicenseIn PDF document text
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
font_00_sfnt_off00037c4f.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x37C4F | 24188 bytes |
SHA-256: 153d255e296d945efc27c22233d33655fb751e0b358961440589778c15fec8bd |
|||
font_01_sfnt_off0003b248.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x3B248 | 19020 bytes |
SHA-256: c18a86325dd8dd1d452a1cdca468ab63d995768214d15deac43a1facc14137fc |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.