MALICIOUS
132
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
The PDF document contains a large number of embedded URLs and text referencing game hacks and cheats, specifically for Roblox. The heuristic firings indicate this is a link farm designed to lure users to scam or malicious websites. While no scripts were directly extracted, the structure and content strongly suggest a phishing or scamming attempt, likely delivered as a spearphishing attachment.
Machine Learning
- Nyx PDF Classifier malicious score 0.6193
Heuristics 5
-
PDF carries distributed game-hack scam link farm critical PDF_GAME_HACK_SEO_LINK_FARMPDF contains a free-generator/game-hack lure together with many external PDF links spread across distinct hosts whose filenames advertise game hacks, cheats, jailbreaks, generators, or free currency. This is a high-confidence scam/SEO-poisoning carrier: the PDF exists to route users into malicious or unwanted download/redirect chains, not to present normal document content.
-
PDF carries game-hack generator link farm medium PDF_GAME_HACK_LINK_FARMPDF contains a gaminggenerator.org app lure together with multiple external PDF links whose filenames advertise game hacks, cheats, jailbreaks, or generators. This is a lure/delivery link farm rather than a PDF exploit: the risk is the linked redirection chain.
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/god-mode-hack-roblox-cheat-engine-6.4 PDF link annotation
- http://www.drent.se/images/roblox-template-hacker.pdfIn PDF document text
- https://www.hbproducts.dk/images/free-bc-roblox-2021.pdfIn PDF document text
- https://www.millatgears.com/images/hack-polyguns-roblox.pdfIn PDF document text
- http://omahahospitalityhalloffame.org/images/piano-roblox-hack.pdfIn PDF document text
- https://schulzpressetext.de/images/how-to-roblox-script-hack.pdfIn PDF document text
- https://pa-waingapu.go.id/images/cheats-for-roblox-realistic-roleplay.pdfIn PDF document text
- http://indotec.fr/images/play-roblox-free-online-no-download.pdfIn PDF document text
- http://asiasieja.pl/images/roblox-hack-loaderexe.pdfIn PDF document text
- http://sscclc.edu.ec/images/roblox-edit-money-value-cheat-2021.pdfIn PDF document text
- http://www.eurologistiki.gr/images/hack-this-roblox-account.pdfIn PDF document text
- https://www.eglihotel.gr/images/free-robux-generator-no-human-verification-mobile.pdfIn PDF document text
- https://www.porthos.it/images/how-to-get-25-robux-free.pdfIn PDF document text
- http://atelierweb.it/images/free-robux-for-roblox-yolasite-com.pdfIn PDF document text
- https://www.bmta.co.uk/images/roblox-weight-lifting-simulator-2-hack-script-download.pdfIn PDF document text
- https://masseymotorcars.com/images/roblox-free-holo.pdfIn PDF document text
- http://bullyinformate.org/images/where-can-i-get-free-robux.pdfIn PDF document text
- https://www.coriglianocalabro.it/images/how-to-get-free-bc-and-robux.pdfIn PDF document text
- http://www.backlineservice.nl/images/roblox-cheat-free-download.pdfIn PDF document text
- http://icomsolutions.com.au/images/roblox-kicked-when-i-open-cheat-engine.pdfIn PDF document text
- https://www.stkdb.cz/images/rocitizens-roblox-hack.pdfIn PDF document text
- https://accord.kiev.ua/images/cool-tshirts-for-free-roblox.pdfIn PDF document text
- https://estalagemmonteverde.com.br/images/how-to-noclip-with-cheat-engine-roblox.pdfIn PDF document text
- http://www.eurologistiki.gr/images/123link-hack-roblox.pdfIn PDF document text
- http://batutynas.lt/images/how-to-get-free-obc-on-roblox-2021.pdfIn PDF document text
- https://www.cnte.org.br/images/free-robux-no-human-verification-or-survey-or-offers-2021.pdfIn PDF document text
- http://clubpure.org/images/roblox-account-hacked-what-to-do.pdfIn PDF document text
- https://www.albisser.ch/images/dead-mist-2-hack-roblox.pdfIn PDF document text
- https://www.mrsz.ir/images/roblox-speed-hack-tool.pdfIn PDF document text
- http://swibome.nl/images/roblox-how-to-get-ninja-animation-for-free.pdfIn PDF document text
- http://www.arredifunebri.com/images/claimrbx-com-free-robux.pdfIn PDF document text
- http://fratellimazzoleni.it/images/gabe-youtube-free-robux.pdfIn PDF document text
- https://www.hotel-forsthaus.com/images/good-free-clothes-on-roblox.pdfIn PDF document text
- https://www.milewood.co.uk/images/hack-cruise-ship-tycoon-roblox-money.pdfIn PDF document text
- https://gafaseo.com/images/roblox-money-cheat-codes-rocitizens.pdfIn PDF document text
- http://www.rezbb.sk/images/cupcake-roblox-exploit-knife-hack.pdfIn PDF document text
- https://servotecnica.com/images/best-free-non-virus-roblox-exploit.pdfIn PDF document text
- http://www.bripi.pl/images/change-clothes-by-id-roblox-script-hack.pdfIn PDF document text
- https://www.stoehr-sauer.de/images/thebesian-get-free-robux-roblox.pdfIn PDF document text
- http://uctovnictvosnv.sk/images/muscle-simulator-roblox-cheat.pdfIn PDF document text
- https://www.ghknights.org/images/free-robux-in-roblox-2021.pdfIn PDF document text
- http://www.comitatoiseo.org/images/roblox-free-gamepass-exploit.pdfIn PDF document text
- http://homequeen.de/images/how-to-hack-someone-roblox-2021.pdfIn PDF document text
- http://www.beged.at/images/does-roblox-ever-give-free-robux.pdfIn PDF document text
- http://www.sanjosedeminas.gob.ec/images/roblox-jailbreak-hack-android.pdfIn PDF document text
- https://cintasoeste.com.ar/images/como-ser-hacker-en-roblox-jailbreak.pdfIn PDF document text
- http://babyxpress.de/images/www-roblox-com-download-free.pdfIn PDF document text
- https://www.gvandenakker.nl/images/how-to-earn-free-robux-online.pdfIn PDF document text
- http://hocquaux.fr/images/roblox-mad-games-hack.pdfIn PDF document text
- http://firstaidacademy.be/images/how-to-get-free-robux-using-roblox-hack.pdfIn PDF document text
+22 more URL(s)
Extracted artifacts 3
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_003_off00007fd8.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x7FD8 | 24600 bytes |
SHA-256: 4dd26051614fcac9270ddb66fb6ffcfb424c6ad8d16d888e814000de160af883 |
|||
font_01_sfnt_off0000b896.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xB896 | 3884 bytes |
SHA-256: 40b61f8938bd710dc29dc58ba3fde91c245a6a69596ec569b4d27c769ca417cf |
|||
font_02_sfnt_off0000c53d.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xC53D | 18904 bytes |
SHA-256: a1a74f231c17cfdaaa496f753f7698830348ac0b02d7039df58541161dc92477 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.