MALICIOUS
132
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
The PDF contains numerous links to external websites that claim to offer game hacks and free in-game currency, such as Robux. The heuristic firings indicate this is a link farm designed to lure users to potentially malicious sites. While no scripts were extracted, the document's structure and embedded URLs strongly suggest a phishing or malware distribution attempt.
Machine Learning
- Nyx PDF Classifier malicious score 0.7795
Heuristics 5
-
PDF carries distributed game-hack scam link farm critical PDF_GAME_HACK_SEO_LINK_FARMPDF contains a free-generator/game-hack lure together with many external PDF links spread across distinct hosts whose filenames advertise game hacks, cheats, jailbreaks, generators, or free currency. This is a high-confidence scam/SEO-poisoning carrier: the PDF exists to route users into malicious or unwanted download/redirect chains, not to present normal document content.
-
PDF carries game-hack generator link farm medium PDF_GAME_HACK_LINK_FARMPDF contains a gaminggenerator.org app lure together with multiple external PDF links whose filenames advertise game hacks, cheats, jailbreaks, or generators. This is a lure/delivery link farm rather than a PDF exploit: the risk is the linked redirection chain.
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/break-free-song-id-roblox PDF link annotation
- http://hemmet-strand.dk/images/those-of-us-who-remain-cheats-roblox.pdfIn PDF document text
- https://www.albisser.ch/images/roblox-extreme-hack.pdfIn PDF document text
- http://legs11.co.za/images/ways-to-hack-roblox.pdfIn PDF document text
- https://domoticaaplicada.com/images/hack-dragon-ball-rage-roblox-android.pdfIn PDF document text
- http://imp.lg.ua/images/free-robux-on-samsung-tablet.pdfIn PDF document text
- http://www.fluidtech.hu/images/army-tycoon-hack-roblox.pdfIn PDF document text
- http://farwesterndistrict.org/images/roblox-free-robux-2021.pdfIn PDF document text
- http://beaksandpawsfl.com/images/free-builders-club-roblox-2021.pdfIn PDF document text
- http://bassacctaxservices.com/images/brand-new-free-robux.pdfIn PDF document text
- http://www.torvet11.dk/images/roblox-hack-nonsense-diamond-download.pdfIn PDF document text
- http://mklista.ru/images/roblox-tycoon-hack.pdfIn PDF document text
- https://www.europap.cz/images/how-to-get-free-robux-on-roblox-2021-working.pdfIn PDF document text
- http://wireprod.net/images/account-stealing-hack-roblox-2021.pdfIn PDF document text
- https://kinderdam.nl/images/how-to-get-free-robux-card-codes-2021.pdfIn PDF document text
- http://belagrogen.by/images/bux-gg-free-robux-2021.pdfIn PDF document text
- http://agrao.in/images/map-for-free-robux.pdfIn PDF document text
- http://www.exikom.com.ua/images/unlimited-robux-and-tix-hack.pdfIn PDF document text
- http://prodent.com.ua/images/how-to-hack-roblox-accounts-mac.pdfIn PDF document text
- http://gvtssp.org/images/roblox-brown-free-hair-boy.pdfIn PDF document text
- http://jugendfeuerwehr-scheinfeld.de/images/roblox-windows-download-free.pdfIn PDF document text
- http://safwafurniture.com/images/free-robux-instantly-2021.pdfIn PDF document text
- http://martincoste.com/images/hack-with-script-roblox.pdfIn PDF document text
- https://meltonschool.org/images/cheat-buddy-roblox-aimbot.pdfIn PDF document text
- https://verdensbarn.no/images/how-to-get-free-schrt-in-robux-copyng-it.pdfIn PDF document text
- http://moralcenter.or.th/images/obbys-that-give-free-robux.pdfIn PDF document text
- https://www.apartmanychorvatsko24.cz/images/roblox-inmortal-hack.pdfIn PDF document text
- http://hemmet-strand.dk/images/free-robux-fake-name.pdfIn PDF document text
- https://www.sg-escholzmatt.ch/images/comment-avoir-un-hacke-sur-jailbreak-roblox.pdfIn PDF document text
- http://subarulegacy.com/images/free-money-roblox-jailbreak.pdfIn PDF document text
- https://pagadder.com/images/free-admin-games-on-roblox.pdfIn PDF document text
- https://technospektr.com.ua/images/free-robux-hack-proof.pdfIn PDF document text
- http://arch-centr.ru/images/counter-blox-roblox-offensive-exploit-hacks-by-autumn.pdfIn PDF document text
- https://www.mrsz.ir/images/how-to-get-free-robux-leah-ashe.pdfIn PDF document text
- https://masseymotorcars.com/images/roblox-jailbreak-hack-injector.pdfIn PDF document text
- http://www.htc.edu.au/images/roblox-free-admin-hack-2021.pdfIn PDF document text
- http://studentslovetravel.com/images/how-to-hack-roblox-booga-booga-on-ipad.pdfIn PDF document text
- https://www.brainpads.com/images/roblox-parkour-bag-hack-v3rm.pdfIn PDF document text
- http://www.sapaengineering.kz/images/roblox-jojos-bizarre-adventure-script-hack.pdfIn PDF document text
- http://apeh.ro/images/how-to-get-free-robux-ferbuary-2021.pdfIn PDF document text
- http://www.art-concept.gr/images/roblox-hack-penis.pdfIn PDF document text
- https://bdsm-centrum.com/images/how-to-use-cheat-engine-67-on-roblox-booga-booga.pdfIn PDF document text
- https://www.milewood.co.uk/images/roblox-battle-royale-hack.pdfIn PDF document text
- http://www.eurologistiki.gr/images/roblox-free-hair-boy-2021.pdfIn PDF document text
- http://musical-arts.de/images/how-to-hack-into-a-account-in-roblox.pdfIn PDF document text
- http://loriginedupain.org/images/is-the-roblox-cheat-detection-good.pdfIn PDF document text
- http://behsanroshd.com/images/roblox-prison-life-v20-infite-ammo-hack-2021.pdfIn PDF document text
- https://www.abrapppe.org.br/images/free-robux-generator-no-survey-legit.pdfIn PDF document text
- http://stroygrad-spb.com/images/how-to-get-free-robux-on-laptop-2021.pdfIn PDF document text
- https://socialvalue.gr/images/cheat-engine-roblox-deadzone-remade-hack.pdfIn PDF document text
+11 more URL(s)
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_003_off00008552.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x8552 | 30944 bytes |
SHA-256: 45d61e395f67c7374a5f677d0709dc547a4bc92a907ffcbc82564359943fb06a |
|||
font_01_sfnt_off0000cb00.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xCB00 | 18200 bytes |
SHA-256: 20e8b17a4d06f34f1997bced59dc2e8766fd910f6d0fd0aa2e8ddbae0e487aea |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.