MALICIOUS
132
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
T1204.002 Malicious Link
The PDF contains a large number of embedded URLs and a document body consisting primarily of links, all related to game hacks and free in-game currency for platforms like Roblox. Heuristic firings like PDF_GAME_HACK_SEO_LINK_FARM and PDF_GAME_HACK_LINK_FARM confirm this is a link farm designed to lure users to scam sites. The ML classifier also flagged the PDF as malicious.
Machine Learning
- Nyx PDF Classifier malicious score 0.5391
Heuristics 5
-
PDF carries distributed game-hack scam link farm critical PDF_GAME_HACK_SEO_LINK_FARMPDF contains a free-generator/game-hack lure together with many external PDF links spread across distinct hosts whose filenames advertise game hacks, cheats, jailbreaks, generators, or free currency. This is a high-confidence scam/SEO-poisoning carrier: the PDF exists to route users into malicious or unwanted download/redirect chains, not to present normal document content.
-
PDF carries game-hack generator link farm medium PDF_GAME_HACK_LINK_FARMPDF contains a gaminggenerator.org app lure together with multiple external PDF links whose filenames advertise game hacks, cheats, jailbreaks, or generators. This is a lure/delivery link farm rather than a PDF exploit: the risk is the linked redirection chain.
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/how-to-get-roblox-money-hack PDF link annotation
- http://behsanroshd.com/images/how-to-hack-roblox-top-model-wins.pdfIn PDF document text
- https://wandersuechtig.de/images/how-to-get-free-robux-without-tix.pdfIn PDF document text
- http://amtabor2.at/images/free-robuxs-by-bananaman329.pdfIn PDF document text
- http://citycare.pt/images/how-to-get-free-coins-on-robowling-roblox.pdfIn PDF document text
- http://technologicalsc.com/images/free-robux-no-games-to-play.pdfIn PDF document text
- https://uofk.edu/images/abs-shirt-roblox-free.pdfIn PDF document text
- https://www.cosmosdawn.net/images/how-tom-get-games-free-roblox.pdfIn PDF document text
- https://www.saisystem.it/images/updated-free-roblox-shirts.pdfIn PDF document text
- http://unionmusicaldebenidorm.com/images/ahje-fhz-roblox-hack.pdfIn PDF document text
- https://www.fhccu.com/images/is-there-anyway-to-hack-to-get-robux.pdfIn PDF document text
- http://fa-deco.com/images/free-robux-without-a-verifacation.pdfIn PDF document text
- http://vipservice-bg.com/images/roblox-jailbreak-hack-exploit-walkspeed-noclip-gravity.pdfIn PDF document text
- http://svp-steinmaur.ch/images/free-10m-robux.pdfIn PDF document text
- http://hotel-buta.by/images/how-to-have-a-madcity-roblox-hack.pdfIn PDF document text
- https://technospektr.com.ua/images/tycoon-simulator-hack-roblox.pdfIn PDF document text
- http://grupodin.com.br/images/roblox-how-to-get-any-item-for-free.pdfIn PDF document text
- https://beejekorf.nl/images/top-5-ways-to-get-free-robux-nicsterv.pdfIn PDF document text
- http://optsuvenir.by/images/free-roblox-codd.pdfIn PDF document text
- http://ltmphoto.com/images/phoenix-signs-hack-roblox-account.pdfIn PDF document text
- https://www.foodsafety.cz/images/roblox-apk-mod-hack-robux-infinitos.pdfIn PDF document text
- http://www.lycee-langevin-wallon.com/images/free-lagless-roblox-recorder.pdfIn PDF document text
- http://zarinnameh.ir/images/name-the-character-roblox-cheats.pdfIn PDF document text
- http://alexanderautos.co/images/how-to-hack-tower-of-hell-roblox.pdfIn PDF document text
- http://finettifrs.it/images/free-audio-loggers-roblox.pdfIn PDF document text
- http://kaleasm.org/images/cheat-phantom-forces-roblox-2021-level.pdfIn PDF document text
- https://www.dierenartsberghman.be/images/roblox-free-virtual-item.pdfIn PDF document text
- https://raduzhnyj.od.ua/images/how-to-buy-something-for-robux-on-catalog-for-free.pdfIn PDF document text
- http://www.actae.gr/images/hack-downlad-roblox.pdfIn PDF document text
- https://www.cfdcnv.com/images/how-to-hack-on-roblox-with-cheat-engine-64.pdfIn PDF document text
- http://finettifrs.it/images/como-hackear-vehicle-simulator-roblox.pdfIn PDF document text
- http://www.rezbb.sk/images/free-robux-for-roblox-yolasite-com.pdfIn PDF document text
- https://www.manisoft.ir/images/how-to-get-free-robux-on-a-group.pdfIn PDF document text
- http://www.eurologistiki.gr/images/earn-free-robux-with-points.pdfIn PDF document text
- http://kids-academy.pl/images/https-web-roblox-free-robux.pdfIn PDF document text
- http://www.lionel-seppoloni.fr/images/yandex-disk-download-744d2021b6-robux-cheat-trs-rar-html.pdfIn PDF document text
- https://reggieslockandkey.com/images/cool-free-robux.pdfIn PDF document text
- http://www.fluidtech.hu/images/free-dominus-roblox-script.pdfIn PDF document text
- http://centuriatus.com/images/how-to-make-everything-on-roblox-free.pdfIn PDF document text
- http://www.exikom.com.ua/images/kids-get-hack-on-roblox.pdfIn PDF document text
- http://solidcommunication.ch/images/knife-hack-roblox.pdfIn PDF document text
- https://ogm-goettingen.de/images/apk-roblox-mobile-hack.pdfIn PDF document text
- http://ghegamethu.vn/images/ninja-legends-hackauto-farmer-free-op-swordroblox.pdfIn PDF document text
- http://aeroclub-kaernten.at/images/hack-roblox-game-jailbreak.pdfIn PDF document text
- https://gabrieliassociati.com/images/infinite-robux-cheat-engine.pdfIn PDF document text
- http://www.exikom.com.ua/images/group-gives-free-robux-on-roblox.pdfIn PDF document text
- http://piadaandco.it/images/hack-t-shirt-roblox.pdfIn PDF document text
- http://acktivities.com/images/free-skin-in-roblox-2021.pdfIn PDF document text
- http://www.gravel.ru/images/roblox-be-crushed-by-a-speeding-wall-hack-script.pdfIn PDF document text
- http://unc-europe.com/images/robuxlive-stream-roblox-hack.pdfIn PDF document text
+9 more URL(s)
Extracted artifacts 3
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_003_off00007f88.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x7F88 | 25184 bytes |
SHA-256: 05a6de0207054d1a33dfe5f5cdd9fabbb375f5547fb4cbde4f0a811712bc3b0d |
|||
font_01_sfnt_off0000b9b4.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xB9B4 | 4472 bytes |
SHA-256: 14c728e1f6cb386dd213d684fddbba508952e43f245bd520fe96bf8a7f19bed9 |
|||
font_02_sfnt_off0000c839.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xC839 | 18204 bytes |
SHA-256: c586b4c8ac3505f80236fe9ae306d23072fe377aa6589e1562bbde0cdf4ac2bd |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.