MALICIOUS
132
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
T1204.002 Malicious Link
The PDF document contains a large number of embedded URLs, many of which are associated with game hacking and free Robux scams. The heuristic firings confirm this is a link farm designed to lure users to potentially malicious sites. The document body and extracted URLs strongly suggest a phishing or scamming attack pattern.
Machine Learning
- Nyx PDF Classifier malicious score 0.7795
Heuristics 5
-
PDF carries distributed game-hack scam link farm critical PDF_GAME_HACK_SEO_LINK_FARMPDF contains a free-generator/game-hack lure together with many external PDF links spread across distinct hosts whose filenames advertise game hacks, cheats, jailbreaks, generators, or free currency. This is a high-confidence scam/SEO-poisoning carrier: the PDF exists to route users into malicious or unwanted download/redirect chains, not to present normal document content.
-
PDF carries game-hack generator link farm medium PDF_GAME_HACK_LINK_FARMPDF contains a gaminggenerator.org app lure together with multiple external PDF links whose filenames advertise game hacks, cheats, jailbreaks, or generators. This is a lure/delivery link farm rather than a PDF exploit: the risk is the linked redirection chain.
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/hpw-to-hack-roblox-android-step-by-step PDF link annotation
- http://yioipzafeiri.gr/images/how-to-get-anything-you-want-for-free-on-roblox.pdfIn PDF document text
- https://www.nema.go.ke/images/free-robux-no-survays.pdfIn PDF document text
- http://energotestcontrol.ru/images/hack-skywars-roblox-2021.pdfIn PDF document text
- http://kulturhusbabberich.nl/images/el-mejor-hack-para-roblox-marzo-2021-tutorial.pdfIn PDF document text
- http://loriginedupain.org/images/rexex-free-robux.pdfIn PDF document text
- http://www.art-concept.gr/images/how-to-install-hacks-on-roblox.pdfIn PDF document text
- http://businessfit.com/images/girl-free-roblox.pdfIn PDF document text
- https://inscastellar.cat/images/skidma-roblox-hack-download.pdfIn PDF document text
- http://www.jureclomas.com.ar/images/roblox-pastebin-hack.pdfIn PDF document text
- http://kruiz21.ru/images/roblox-hack-game-tool.pdfIn PDF document text
- http://axia-verlag.at/images/how-to-get-free-valk-roblox.pdfIn PDF document text
- http://eooe.gr/images/how-to-get-robux-no-hacks-needed.pdfIn PDF document text
- http://mydevice.com.au/images/how-to-make-items-free-in-roblox.pdfIn PDF document text
- http://dmoraitis.gr/images/roblox-hints-and-cheats.pdfIn PDF document text
- http://chartsmart.com.au/images/real-roblox-lumber-tycoon-2-hack-download-2021-no-script.pdfIn PDF document text
- http://www.beged.at/images/roblox-freebies-robux-roblox-hack.pdfIn PDF document text
- https://gigbagwinkel.nl/images/como-hackear-roblox-adopt-me-2021.pdfIn PDF document text
- https://meltonschool.org/images/roblox-cheats-for-robux-xbox-one.pdfIn PDF document text
- https://weightlessriding.com/images/earn-free-robux-gg.pdfIn PDF document text
- http://learningarabic.co.uk/images/roblox-free-robux-obby-working-100.pdfIn PDF document text
- https://www.albisser.ch/images/elite-roblox-hackers.pdfIn PDF document text
- http://www.remiauclair.fr/images/roblox-robux-hack-2021-ios.pdfIn PDF document text
- http://batutynas.lt/images/free-robux-roblox-hack-no-human-verification.pdfIn PDF document text
- http://instrumenttut.by/images/roblox-bit-slicer-speed-hack.pdfIn PDF document text
- http://adues.org/images/alt-hack-roblox.pdfIn PDF document text
- http://echosvoix.ch/images/roblox-free-alts.pdfIn PDF document text
- http://solidkom.ch/images/roblox-hacks-for-apocalypse-rising.pdfIn PDF document text
- http://precitool.ch/images/wiki-free-robux.pdfIn PDF document text
- http://bagna.pl/images/free-robux-virus.pdfIn PDF document text
- https://kldcardio.ru/images/thanos-shirt-roblox-free.pdfIn PDF document text
- https://yarburservices.ru/images/best-roblox-free-roblox-avatar.pdfIn PDF document text
- http://www.eurosan1.ba/images/roblox-salvage-hacks.pdfIn PDF document text
- https://www.rondeberg.com/images/how-to-hack-into-someones-roblox-account.pdfIn PDF document text
- https://www.fenews.co.uk/images/free-robux-no-password-or-phone-number-needed.pdfIn PDF document text
- http://www.fluidtech.hu/images/how-to-report-a-roblox-hacker-that-was-banned.pdfIn PDF document text
- https://belixconstructions.com.au/images/free-robux-codes-apk.pdfIn PDF document text
- http://apcupschennai.com/images/free-robux-all-credit-pastebin.pdfIn PDF document text
- http://beagle-cindy.de/images/roblox-hack-electric-state.pdfIn PDF document text
- http://logisticgroup.co/images/cheat-engive-vs-roblox.pdfIn PDF document text
- http://tegeler-segler.de/images/roblox-adopt-me-free-ride-potion.pdfIn PDF document text
- https://www.prodex-holz.cz/images/roblox-blue-tatoo-free.pdfIn PDF document text
- http://thehancgroup.com/images/roblox-jailbreajk-new-hack.pdfIn PDF document text
- https://hassel-event.de/images/roblox-april-fools-hack-2021.pdfIn PDF document text
- http://www.centromedicoaurora.it/images/roblox-play-now-for-free-unblocked.pdfIn PDF document text
- https://cbiinc.org/images/free-games-on-roblox-you-can-copy.pdfIn PDF document text
- https://www.audipec.com.br/images/roblox-phantom-forces-hacking-scripts.pdfIn PDF document text
- https://www.hbproducts.dk/images/how-to-get-free-diamonds-on-royale-high-roblox-hack.pdfIn PDF document text
- http://androidthai.in.th/images/how-to-get-free-admin-on-roblox-2021.pdfIn PDF document text
- http://evro-okna.net/images/how-to-hack-roblox-no-survey.pdfIn PDF document text
+12 more URL(s)
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_003_off000080c4.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x80C4 | 25304 bytes |
SHA-256: 93348c129323201d1d5d54f1ba70e91b83e63e8f76e414eaf5fde575a67926c3 |
|||
font_01_sfnt_off0000ba40.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xBA40 | 18632 bytes |
SHA-256: 76ea5bf1e2c1eb35ad8c297c52325f21ebad2333fba3f9d2ca83a799534b8835 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.