MALICIOUS
102
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
T1204.002 Malicious Link
The PDF file contains a large number of embedded URLs, predominantly related to game hacks and free items for Roblox. Heuristic analysis identified this as a link farm designed to lure users to scam websites. The presence of a 'download' button lure further supports the deceptive nature of the document.
Machine Learning
- Nyx PDF Classifier suspicious score 0.4342
Heuristics 5
-
PDF carries distributed game-hack scam link farm critical PDF_GAME_HACK_SEO_LINK_FARMPDF contains a free-generator/game-hack lure together with many external PDF links spread across distinct hosts whose filenames advertise game hacks, cheats, jailbreaks, generators, or free currency. This is a high-confidence scam/SEO-poisoning carrier: the PDF exists to route users into malicious or unwanted download/redirect chains, not to present normal document content.
-
PDF carries game-hack generator link farm medium PDF_GAME_HACK_LINK_FARMPDF contains a gaminggenerator.org app lure together with multiple external PDF links whose filenames advertise game hacks, cheats, jailbreaks, or generators. This is a lure/delivery link farm rather than a PDF exploit: the risk is the linked redirection chain.
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/free-shirt-roblox-2021 PDF link annotation
- http://www.pcclawyers.com.au/images/roblox-redline-hack.pdfIn PDF document text
- http://www.maakherumusic.net/images/how-to-hack-roblox-game-data.pdfIn PDF document text
- https://www.air-shop.cz/images/free-robux-no-waiting.pdfIn PDF document text
- http://www.it-network.com.mx/images/free-roblox-gift-card-codes-that-havent-been-used-yet.pdfIn PDF document text
- http://www.lycee-langevin-wallon.com/images/roblox-swat-shirt-free.pdfIn PDF document text
- http://geelongbowls.com.au/images/how-to-get-free-money-on-bloxburg-roblox.pdfIn PDF document text
- https://www.acbc.wa.edu.au/images/wiki-free-robux.pdfIn PDF document text
- https://jdlgroup.ca/images/roblox-vehicul-simulator-hacke.pdfIn PDF document text
- https://www.siaeag.fr/images/free-robux-without-human-verification-real.pdfIn PDF document text
- https://www.seeingindependence.org/images/tuto-comment-hack-robux.pdfIn PDF document text
- http://learningarabic.co.uk/images/roblox-jailbreak-hack-june.pdfIn PDF document text
- https://www.acbc.wa.edu.au/images/roblox-promo-code-hack-2021-pastebin.pdfIn PDF document text
- https://www.acbc.wa.edu.au/images/how-to-get-free-admin-in-roblox-2021.pdfIn PDF document text
- https://www.intro-marketing.hr/images/hackear-el-roblox-me-city-noma.pdfIn PDF document text
- https://www.jura-museum.de/images/free-roblox-accoiunt.pdfIn PDF document text
- http://www.maakherumusic.net/images/inquisitormaster-the-new-roblox-hacker-is-after-me.pdfIn PDF document text
- https://www.milewood.co.uk/images/easy-hacking-engine-for-roblox.pdfIn PDF document text
- http://www.centrul-mara.ro/images/how-to-hack-roblox-jailbreak-2021.pdfIn PDF document text
- https://www.modellflug-mieming.at/images/como-tener-robux-gratis-en-roblox-2021-enero-nuevo-hack.pdfIn PDF document text
- https://www.lomrad.go.th/images/roblox-hack-download-url-is-gd-robloxsrvr.pdfIn PDF document text
- http://dos.most.gov.la/images/roblox-games-where-you-can-play-music-for-free.pdfIn PDF document text
- https://www.seasleepveurne.be/images/how-to-hack-roblox-life-in-paradise.pdfIn PDF document text
- https://amatq.ca/images/http-rtrustpro-ssd-k-roblox-free-clothes-hack.pdfIn PDF document text
- http://www.htc.edu.au/images/final-stand-hack-roblox.pdfIn PDF document text
- https://www.lavigny.ch/images/best-free-game-on-roblox.pdfIn PDF document text
- http://www.sapaengineering.kz/images/roblox-free-roblox-generator.pdfIn PDF document text
- https://www.siaeag.fr/images/robloxcom-free-kkk-k-k-k-k-m-k.pdfIn PDF document text
- http://www.rawbluesparis.fr/images/how-to-get-400-free-robux.pdfIn PDF document text
- https://pa-waingapu.go.id/images/buxblast-com-roblox-cheats.pdfIn PDF document text
- http://www.diariotermal.com.ar/images/free-games-similar-to-roblox.pdfIn PDF document text
- https://www.seasleepveurne.be/images/how-to-get-any-hat-on-roblox-for-free-2021.pdfIn PDF document text
- https://www.siaeag.fr/images/how-to-get-free-character-in-roblox.pdfIn PDF document text
- https://amatq.ca/images/wearedevs-roblox-hack.pdfIn PDF document text
- https://fkg.usu.ac.id/images/create-free-audio-roblox.pdfIn PDF document text
- https://www.jura-museum.de/images/all-roblox-eggs-2021-hack.pdfIn PDF document text
- https://www.seeingindependence.org/images/www-free-robux-codes-info.pdfIn PDF document text
- https://www.acbc.wa.edu.au/images/roblox-rs16-5-hacks.pdfIn PDF document text
- http://poltekkeskhjogja.ac.id/images/roblox-thomas-wooden-railway-free-demo.pdfIn PDF document text
- http://www.maakherumusic.net/images/free-robux-generator-no-verification-2021.pdfIn PDF document text
- http://www.diariotermal.com.ar/images/cute-roblox-faces-for-free.pdfIn PDF document text
- https://amatq.ca/images/how-to-hack-elemental-battle-grounds-roblox.pdfIn PDF document text
- http://bkd1.balikpapan.go.id/images/roblox-dragon-ball-rage-hack-script.pdfIn PDF document text
- https://www.abrapppe.org.br/images/how-to-become-an-admin-on-roblox-for-free.pdfIn PDF document text
- http://www.tehran-sam.ir/images/roblox-blockburg-money-hack-penquin-gui-script.pdfIn PDF document text
- https://www.romedia.gr/images/free-t-shirt-design-in-roblox.pdfIn PDF document text
- https://www.beaufortcollege.ie/images/free-things-in-roblox-2021.pdfIn PDF document text
- http://www.lycee-langevin-wallon.com/images/how-to-hack-roblox-account-february.pdfIn PDF document text
- http://www.copoint.co.uk/images/how-to-get-free-roblox-money-2021.pdfIn PDF document text
- https://www.academyocgc.gr/images/roblox-hack-all-game.pdfIn PDF document text
+52 more URL(s)
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
font_00_sfnt_off00008c3e.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x8C3E | 22316 bytes |
SHA-256: 6d5270601adb365f2162733d46f4424dffcc6ffff4291238fcd1f0b3dfeca60e |
|||
font_01_sfnt_off0000be20.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xBE20 | 17972 bytes |
SHA-256: 8f9d25669983961e9278fb2694ef0a292794f608fa5437f7f3921835c2e42466 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.