MALICIOUS
132
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
The PDF file contains numerous links to websites that claim to offer game hacks and cheats, specifically for Roblox. The heuristic PDF_GAME_HACK_SEO_LINK_FARM indicates a link farm designed to lure users with search engine optimization for game-related terms. The primary URL, http://gaminggenerator.org/app/431946152/roblox-dragonball-rage-cheats, is identified as a lure. While no scripts were extracted, the nature of the content and the ML classifier flagging it as malicious suggest it's part of a phishing or malware distribution scheme.
Machine Learning
- Nyx PDF Classifier malicious score 0.8382
Heuristics 5
-
PDF carries distributed game-hack scam link farm critical PDF_GAME_HACK_SEO_LINK_FARMPDF contains a free-generator/game-hack lure together with many external PDF links spread across distinct hosts whose filenames advertise game hacks, cheats, jailbreaks, generators, or free currency. This is a high-confidence scam/SEO-poisoning carrier: the PDF exists to route users into malicious or unwanted download/redirect chains, not to present normal document content.
-
PDF carries game-hack generator link farm medium PDF_GAME_HACK_LINK_FARMPDF contains a gaminggenerator.org app lure together with multiple external PDF links whose filenames advertise game hacks, cheats, jailbreaks, or generators. This is a lure/delivery link farm rather than a PDF exploit: the risk is the linked redirection chain.
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/roblox-dragonball-rage-cheats PDF link annotation
- https://www.coriglianocalabro.it/images/go-through-walls-hack-roblox.pdfIn PDF document text
- https://www.abrapppe.org.br/images/free-robux-hack-sheet.pdfIn PDF document text
- http://www.nielsen2u.dk/images/free-card-giver-roblox-jailbreak-2021.pdfIn PDF document text
- https://www.iadh.bi/images/free-rhs-cash-in-roblox-high-school.pdfIn PDF document text
- http://salantiskis.lt/images/roblox-kidnap-hack.pdfIn PDF document text
- https://pa-waingapu.go.id/images/how-to-hack-roblox-accounts-agust.pdfIn PDF document text
- http://dos.most.gov.la/images/roblox-can-moderators-get-free-robux.pdfIn PDF document text
- http://www.web.stc-part.co.th/images/5-roblox-games-that-give-free-robux-working.pdfIn PDF document text
- https://www.wildpark-johannismuehle.de/images/free-codes-royale-high-roblox.pdfIn PDF document text
- http://www.rezbb.sk/images/roblox-guest-666-t-shirts-free.pdfIn PDF document text
- https://kimolos-link.gr/images/free-robux-login.pdfIn PDF document text
- https://amatq.ca/images/best-hacker-ever-roblox.pdfIn PDF document text
- https://www.abrapppe.org.br/images/how-to-get-a-free-home-on-roblox-on-rocitixens.pdfIn PDF document text
- http://www.hawler.in/images/legal-free-robux.pdfIn PDF document text
- http://salantiskis.lt/images/generate-free-robux-gnome.pdfIn PDF document text
- https://www.cpnf.ch/images/noob-vs-pro-vs-hacker-roblox-bloxburg-build.pdfIn PDF document text
- http://zarinnameh.ir/images/bloxland-fre-robux.pdfIn PDF document text
- http://www.kalaaliaraq.dk/images/free-robux-tool-created-by-redboyrb-h2.pdfIn PDF document text
- https://esl.ipb.ac.id/images/free-robux-how-to-complete-heavy-metal-machines.pdfIn PDF document text
- https://ballaratcaravans.com.au/images/free-robux-obbey-easy.pdfIn PDF document text
- http://www.boic.nl/images/how-to-get-free-robux-no-human-verification-on-mobile.pdfIn PDF document text
- https://www.foodsafety.cz/images/ho-do-i-hack-in-roblox.pdfIn PDF document text
- http://escolaarboc.cat/images/how-to-hack-giovannis-roblox-account.pdfIn PDF document text
- http://gops.pruszczgdanski.pl/images/extreme-injector-roblox-hack.pdfIn PDF document text
- http://dos.most.gov.la/images/roblox-how-to-get-robux-no-hack-2021-fre.pdfIn PDF document text
- http://www.fluidtech.hu/images/roblox-hack-2021-forum.pdfIn PDF document text
- https://verdensbarn.no/images/roblox-epic-minigames-hack-2021.pdfIn PDF document text
- http://legs11.co.za/images/hacks-tools-para-roblox.pdfIn PDF document text
- https://www.air-shop.cz/images/free-roblox-toy-codes-2021-not-used.pdfIn PDF document text
- http://agrao.in/images/roblox-robux-hack-deutsch.pdfIn PDF document text
- http://domaizdereva24.ru/images/how-to-cheat-in-horror-tyccon-roblox.pdfIn PDF document text
- https://corbo.ru/images/how-to-hack-super-simon-says-in-roblox.pdfIn PDF document text
- http://www.lionel-seppoloni.fr/images/roblox-get-free-robux-2021.pdfIn PDF document text
- http://nosocomium.rv.ua/images/reverse-a-roblox-hack.pdfIn PDF document text
- https://www.udivadlahotel.cz/images/roblox-murderer-mystery-2-gem-cheats.pdfIn PDF document text
- http://www.evaplast.by/images/roblox-hack-tool-2021-download.pdfIn PDF document text
- http://www.eurologistiki.gr/images/avatar-roblox-skin-free.pdfIn PDF document text
- https://www.porthos.it/images/free-redeem-code-roblox.pdfIn PDF document text
- http://www.htc.edu.au/images/free-stuff-dungeon-quest-roblox.pdfIn PDF document text
- http://pa-tanjungselor.go.id/images/hack-phantom-forces-roblox.pdfIn PDF document text
- http://ff-obertraun.at/images/how-to-get-free-robux-easy-on-a-phone.pdfIn PDF document text
- https://ballaratcaravans.com.au/images/roblox-hack-fly-download.pdfIn PDF document text
- https://pa-waingapu.go.id/images/how-to-make-an-audio-on-roblox-free.pdfIn PDF document text
- https://verdensbarn.no/images/roblox-online-robux-hack.pdfIn PDF document text
- http://ff-obertraun.at/images/get-free-robux-in-robolx.pdfIn PDF document text
- http://sscclc.edu.ec/images/como-hacer-un-free-admin-en-roblox.pdfIn PDF document text
- https://www.eglihotel.gr/images/pastebin-roblox-hack.pdfIn PDF document text
- https://www.coriglianocalabro.it/images/roblox-fortnite-simulator-hack.pdfIn PDF document text
- https://socialvalue.gr/images/cheat-cloud-simulator-roblox.pdfIn PDF document text
+2 more URL(s)
Extracted artifacts 3
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_003_off000055d5.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x55D5 | 27044 bytes |
SHA-256: 617943ad09ba6e42ae9e219c670490c44eddf528aa74bddaf929cfa69c6dc46a |
|||
font_01_sfnt_off000092dd.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x92DD | 7868 bytes |
SHA-256: 9ab48a3c70dbd2ba43dd2da6f7a79acff036e3cebb96dcedd80efef22ec14aee |
|||
font_02_sfnt_off0000a5a9.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xA5A9 | 18324 bytes |
SHA-256: 01d62b8044057d5c741d9afd62a8e595da374dbefcd9cf4826c5826f3d300506 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.