MALICIOUS
102
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
The PDF file contains numerous embedded URLs and a document body that is essentially a list of links, all related to 'Robux' and 'hacks' for the game Roblox. The heuristic firings confirm this is a link farm designed to scam users. While no scripts were extracted, the structure and content strongly indicate a phishing or scamming attempt, likely delivered as a spearphishing attachment.
Machine Learning
- Nyx PDF Classifier suspicious score 0.4394
Heuristics 5
-
PDF carries distributed game-hack scam link farm critical PDF_GAME_HACK_SEO_LINK_FARMPDF contains a free-generator/game-hack lure together with many external PDF links spread across distinct hosts whose filenames advertise game hacks, cheats, jailbreaks, generators, or free currency. This is a high-confidence scam/SEO-poisoning carrier: the PDF exists to route users into malicious or unwanted download/redirect chains, not to present normal document content.
-
PDF carries game-hack generator link farm medium PDF_GAME_HACK_LINK_FARMPDF contains a gaminggenerator.org app lure together with multiple external PDF links whose filenames advertise game hacks, cheats, jailbreaks, or generators. This is a lure/delivery link farm rather than a PDF exploit: the risk is the linked redirection chain.
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/how-to-advertise-your-roblox-game-for-free PDF link annotation
- https://www.tqma.com.ec/images/80-robux-free.pdfIn PDF document text
- https://pa-waingapu.go.id/images/free-logo-youtube-for-roblox.pdfIn PDF document text
- http://parkinsononline.com/images/ant-free-robux.pdfIn PDF document text
- http://www.lovecraftiana.com.ar/images/builders-club-roblox-free-for-kids.pdfIn PDF document text
- http://ghegamethu.vn/images/get-free-robux-add-codes.pdfIn PDF document text
- http://unionmusicaldebenidorm.com/images/how-to-hack-out-of-bank-roblox.pdfIn PDF document text
- http://lanoblaie.fr/images/get-wall-hacks-in-roblox.pdfIn PDF document text
- http://greenoase.be/images/free-roblox-hack-2021.pdfIn PDF document text
- http://zarinnameh.ir/images/free-roblox-supream-pants.pdfIn PDF document text
- http://britishcomics.com/images/free-robux-tampermonkey-code.pdfIn PDF document text
- http://legs11.co.za/images/bun-hub-roblox-hacks.pdfIn PDF document text
- http://lillysonthelake.com/images/wiek-ann-man-sich-robux-hacken.pdfIn PDF document text
- https://www.air-shop.cz/images/how-to-use-cheat-engine-67-on-roblox-2021.pdfIn PDF document text
- http://musical-arts.de/images/roblox-bloxburg-money-hack.pdfIn PDF document text
- http://kruiz21.ru/images/free-dominus-frigidus-roblox.pdfIn PDF document text
- https://accord.kiev.ua/images/how-to-hack-thinknoodles-roblox-account.pdfIn PDF document text
- http://senfinfo.com/images/new-cheat-in-roblox-jailbreak.pdfIn PDF document text
- http://bolsaycapital.com/images/how-to-get-more-robux-with-cheat-engine.pdfIn PDF document text
- https://gzog.pl/images/scriptware-roblox-hack.pdfIn PDF document text
- http://apkmaykop.ru/images/military-base-roblox-free-model.pdfIn PDF document text
- http://nebraskahospitalityhalloffame.com/images/roblox-island-royale-script-2021-hack.pdfIn PDF document text
- http://salantiskis.lt/images/hacks-for-de-oride-isle-sanatorium-roblox.pdfIn PDF document text
- https://pemadamapi.net/images/buy-robux-for-free-games.pdfIn PDF document text
- http://www.exikom.com.ua/images/hacker-de-roblox-00.pdfIn PDF document text
- http://5346000.com/images/como-hackear-super-dragon-ball-heroes-en-roblox.pdfIn PDF document text
- http://escolaarboc.cat/images/roblox-crack-hack.pdfIn PDF document text
- http://santjoandelesabadesses.cat/images/roblox-tradelands-cheat-engine.pdfIn PDF document text
- http://medimacs.eu/images/how-to-get-a-lot-of-robux-for-free-2021.pdfIn PDF document text
- http://energotestcontrol.ru/images/how-to-get-free-robux-crystalsheep.pdfIn PDF document text
- http://76remont-kvartir.ru/images/roblox-gift-cards-free-codes-2021.pdfIn PDF document text
- http://parkinsononline.com/images/roblox-hack-how-to-get-free-robux-2021.pdfIn PDF document text
- http://haertetechnik-steinbach.de/images/cheat-roblox-2021.pdfIn PDF document text
- https://scraperite.com/images/hack-for-rubux-on-roblox.pdfIn PDF document text
- http://bibliodetki.ru/images/how-to-play-free-draw-alpha-2-on-roblox.pdfIn PDF document text
- https://www.devries-group.de/images/elysian-hack-roblox.pdfIn PDF document text
- http://www.mjclautrec.fr/images/hacking-roblox-by-hacking-roblox-by-zia-lets-play.pdfIn PDF document text
- https://www.saisystem.it/images/como-conseguir-robux-gratis-en-roblox-2021-hack.pdfIn PDF document text
- http://wokbaarlo.nl/images/roblox-crash-checked-cheat-engine.pdfIn PDF document text
- http://iluvlocalplaces.com/images/how-to-get-back-your-hacked-roblox-account.pdfIn PDF document text
- http://www.actae.gr/images/naruto-rpg-roblox-cheats.pdfIn PDF document text
- https://bapalaye.org/images/hacking-curleyhairs-in-roblox.pdfIn PDF document text
- http://rafaelmontesinos.com/images/roblox-ro-ghoul-cheat.pdfIn PDF document text
- https://corbo.ru/images/roblox-hack-no-survey-no-password-no-download.pdfIn PDF document text
- http://www.les2alpes-location.com/images/roblox-prison-life-free-game.pdfIn PDF document text
- http://news123.it/images/free-robux-codes-2021-not-used.pdfIn PDF document text
- http://www.campiresine.it/images/hacked-roblox-face.pdfIn PDF document text
- http://apcupschennai.com/images/how-to-get-100-robux-fast-and-free.pdfIn PDF document text
- https://www.abrapppe.org.br/images/free-games-roblox-games.pdfIn PDF document text
- https://pemadamapi.net/images/roblox-card-code-hack.pdfIn PDF document text
+12 more URL(s)
Extracted artifacts 3
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_003_off00008389.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x8389 | 29604 bytes |
SHA-256: a225d8be4a9c3a5cbe8f6f6a320afe658ad8d9b0fe8316a7c0a68fb67e37d7f4 |
|||
font_01_sfnt_off0000c73e.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xC73E | 2832 bytes |
SHA-256: 77ae1c4cffa647a8fd533dfa4102e94364989f9e80b9cd131876e9d1005899a2 |
|||
font_02_sfnt_off0000d0ee.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xD0EE | 18840 bytes |
SHA-256: 92f424be7f9c1936a92d5b87e02e26d85ba4de41d2cb500dd0b03992de720a60 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.