Malicious PDF — malware analysis report

Heuristics 5

• PDF carries distributed game-hack scam link farm critical PDF_GAME_HACK_SEO_LINK_FARM
  PDF contains a free-generator/game-hack lure together with many external PDF links spread across distinct hosts whose filenames advertise game hacks, cheats, jailbreaks, generators, or free currency. This is a high-confidence scam/SEO-poisoning carrier: the PDF exists to route users into malicious or unwanted download/redirect chains, not to present normal document content.
• PDF carries game-hack generator link farm medium PDF_GAME_HACK_LINK_FARM
  PDF contains a gaminggenerator.org app lure together with multiple external PDF links whose filenames advertise game hacks, cheats, jailbreaks, or generators. This is a lure/delivery link farm rather than a PDF exploit: the risk is the linked redirection chain.
• Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTON
  Document contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
• External URI info PDF_URI
  PDF contains an external URL action
• Embedded URL info EMBEDDED_URL
  One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
  URL http://gaminggenerator.org/app/431946152/how-to-teleport-using-cheat-engine-roblox PDF link annotation

  • http://www.copoint.co.uk/images/free-items-catalog-roblox.pdf%0AIn PDF document text
  • https://esl.ipb.ac.id/images/cheat-engine-64-roblox-windows-8.pdf%0AIn PDF document text
  • http://agrao.in/images/how-to-get-free-robux-in-roblox-on-computer.pdf%0AIn PDF document text
  • http://nevesomost.by/images/robux-script-hack-2021.pdf%0AIn PDF document text
  • http://www.evaplast.by/images/wiek-ann-man-sich-robux-hacken.pdf%0AIn PDF document text
  • http://www.drent.se/images/free-roblox-password-and-username.pdf%0AIn PDF document text
  • http://www.sanjosedeminas.gob.ec/images/robux-party-com-four-robux-free.pdf%0AIn PDF document text
  • http://domaizdereva24.ru/images/black-hair-on-roblox-free.pdf%0AIn PDF document text
  • https://www.audev.com/images/hacking-curleyhairs-in-roblox.pdf%0AIn PDF document text
  • http://iluvlocalplaces.com/images/how-to-hack-to-get-robux-2021.pdf%0AIn PDF document text
  • https://corbo.ru/images/how-to-hack-into-roblox-account-with-method.pdf%0AIn PDF document text
  • https://amatq.ca/images/how-to-hack-super-simon-says-on-roblox.pdf%0AIn PDF document text
  • http://www.vktzunami.cz/images/free-robux-hack-generator-2021.pdf%0AIn PDF document text
  • https://ballaratcaravans.com.au/images/free-robux-via-offers.pdf%0AIn PDF document text
  • http://dottgagliardi.com/images/roblox-mania-get-free-robux.pdf%0AIn PDF document text
  • http://escolaarboc.cat/images/btools-roblox-hack-mac.pdf%0AIn PDF document text
  • http://www.occquimica.com.br/images/free-robux-comtoday.pdf%0AIn PDF document text
  • http://www.agri-tech.com.au/images/free-robux-adopt-me.pdf%0AIn PDF document text
  • http://zarinnameh.ir/images/download-free-cool-roblox-outfits-for-man.pdf%0AIn PDF document text
  • http://www.nielsen2u.dk/images/roblox-btools-hack-2021-download.pdf%0AIn PDF document text
  • https://technospektr.com.ua/images/how-to-be-naked-on-roblox-free-2021.pdf%0AIn PDF document text
  • https://hbln.org.au/images/hack-fool-roblox.pdf%0AIn PDF document text
  • https://www.porthos.it/images/roblox-free-accounts-with-robux-2021.pdf%0AIn PDF document text
  • https://www.porthos.it/images/roblox-i-got-this-shirt-for-free.pdf%0AIn PDF document text
  • https://esl.ipb.ac.id/images/does-inspect-elements-hack-robux.pdf%0AIn PDF document text
  • http://almacargo.com/images/how-to-get-free-robux-easy-and-fast-2021.pdf%0AIn PDF document text
  • https://www.eglihotel.gr/images/emojicode-roblox-2021-get-emojis-free-2021-d-.pdf%0AIn PDF document text
  • http://www.eaapiaria.es/images/free-robux-generator-no-human-verification-or-download.pdf%0AIn PDF document text
  • http://www.brtes.com/images/how-to-hack-into-a-roblox-account-without-password.pdf%0AIn PDF document text
  • http://zarinnameh.ir/images/roblox-cheat-dungeon-quest-fr.pdf%0AIn PDF document text
  • http://en.wikipedia.org/wiki/MIT_LicenseIn extracted file (font_00_sfnt_off000033d4.bin)

Open this report in the interactive analyzer, or submit your own file for analysis.