MALICIOUS
132
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
T1204.002 Malicious Link
The PDF file contains a large number of embedded URLs and text snippets related to game hacks and free in-game currency, specifically for Roblox. The heuristic firings indicate a link farm designed to lure users to scam websites. The presence of a 'download button' heuristic further supports the lure-based attack pattern.
Machine Learning
- Nyx PDF Classifier malicious score 0.6193
Heuristics 5
-
PDF carries distributed game-hack scam link farm critical PDF_GAME_HACK_SEO_LINK_FARMPDF contains a free-generator/game-hack lure together with many external PDF links spread across distinct hosts whose filenames advertise game hacks, cheats, jailbreaks, generators, or free currency. This is a high-confidence scam/SEO-poisoning carrier: the PDF exists to route users into malicious or unwanted download/redirect chains, not to present normal document content.
-
PDF carries game-hack generator link farm medium PDF_GAME_HACK_LINK_FARMPDF contains a gaminggenerator.org app lure together with multiple external PDF links whose filenames advertise game hacks, cheats, jailbreaks, or generators. This is a lure/delivery link farm rather than a PDF exploit: the risk is the linked redirection chain.
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/roblox-hacks-for-ninja-legends PDF link annotation
- http://www.mjclautrec.fr/images/give-me-free-robux-google.pdfIn PDF document text
- http://www.exikom.com.ua/images/earn-free-robux-by-downloading-apps-and-completing-offers.pdfIn PDF document text
- http://www.lionel-seppoloni.fr/images/aim-hack-roblox-prison-royal.pdfIn PDF document text
- http://www.controverseinterapie.it/images/free-robux-just-put-in-your-password.pdfIn PDF document text
- https://yarburservices.ru/images/free-robux-generator-no-survey-no-hack.pdfIn PDF document text
- http://selectionspdf.fr/images/free-vip-codes-for-roblox.pdfIn PDF document text
- http://www.occquimica.com.br/images/how-to-get-free-cash-on-horse-valley-beta-roblox.pdfIn PDF document text
- http://www.lycee-langevin-wallon.com/images/undetectable-roblox-cheat-engine.pdfIn PDF document text
- https://socialvalue.gr/images/roblox-cs-go-aimbot-hack.pdfIn PDF document text
- https://www.elevage-chiot.fr/images/https-hack-de-robux-roblox-robux.pdfIn PDF document text
- http://agrao.in/images/roblox-ultimate-driving-2-westover-islands-free-job.pdfIn PDF document text
- http://pourvosvacances.com/images/dragon-keeper-roblox-cheats.pdfIn PDF document text
- http://greasley.website/images/free-robux-rblox.pdfIn PDF document text
- http://ff-klaffenbach.de/images/roblox-tower-battles-hack.pdfIn PDF document text
- https://www.eglihotel.gr/images/free-synapse-key-roblox.pdfIn PDF document text
- http://yogaschooldecypres.be/images/free-robux-games-on-roblox-that-work-2021.pdfIn PDF document text
- https://www.air-shop.cz/images/how-to-hack-roblox-accouns.pdfIn PDF document text
- https://digitalsenseafrica.com.ng/images/cheat-argent-sur-roblox-vehicle-simulator.pdfIn PDF document text
- http://pa-tanjungselor.go.id/images/roblox-games-that-give-you-free-clothes.pdfIn PDF document text
- http://uptodate.az/images/free-roblox-trades.pdfIn PDF document text
- http://ilcommercialista.info/images/robux-hack-facile.pdfIn PDF document text
- https://enpav.it/images/hown-to-get-ninja-package-for-free-2021-roblox.pdfIn PDF document text
- http://bwharrisalumniusa.org/images/fly-hack-roblox-script-2021.pdfIn PDF document text
- http://schlossschaenke-andernach.de/images/auto-clicker-hack-roblox.pdfIn PDF document text
- http://www.pbconsulting.it/images/comment-hacker-pour-avoir-des-robux-2021.pdfIn PDF document text
- https://eleganceautospa.ca/images/roblox-free-tops.pdfIn PDF document text
- http://dos.most.gov.la/images/walk-through-walls-roblox-hack.pdfIn PDF document text
- https://www.gymun.cz/images/dss-roblox-money-hacks.pdfIn PDF document text
- http://uctovnictvosnv.sk/images/dev-hacks-roblox.pdfIn PDF document text
- https://www.foodsafety.cz/images/roblox-free-ninja-animation.pdfIn PDF document text
- http://greenoase.be/images/roblox-cheats-deutsch-pc.pdfIn PDF document text
- http://condit-pack.com/images/free-ninja-masks-roblox.pdfIn PDF document text
- http://cmme.it/images/free-robux-roblox-hack-no-survey-no-human-verification-update.pdfIn PDF document text
- http://www.zdravazena.sk/images/roblox-kick-off-speed-hack.pdfIn PDF document text
- http://www.eurologistiki.gr/images/hack-roblox-mod-menu.pdfIn PDF document text
- http://kruiz21.ru/images/free-roblox-boy-hosting-2-7.pdfIn PDF document text
- http://gbp-trabkiwielkie.pl/images/hacks-for-roblox-2021-june.pdfIn PDF document text
- http://xn--59-6kcusgqlmfgen3m.xn--p1ai/images/are-you-allowed-to-hack-roblox.pdfIn PDF document text
- http://schottlandfieber.de/images/dominous-roblox-hack.pdfIn PDF document text
- http://www.rezbb.sk/images/roblox-robux-hack-2021.pdfIn PDF document text
- http://gremihostaleria.cat/images/free-robux-no-human-verification-android.pdfIn PDF document text
- https://zabota-kashira.ru/images/natural-disaster-roblox-cheats.pdfIn PDF document text
- http://www.fanciullovito.it/images/como-conseguir-robux-gratis-sin-hacks-pato.pdfIn PDF document text
- http://saip.ws/images/hackear-roblox-escape-prison.pdfIn PDF document text
- https://semanasantacehegin.com/images/how-to-get-free-clothes-on-roblox-2021-no-bc.pdfIn PDF document text
- http://gruporamos.do/images/roblox-gift-card-codes-hack.pdfIn PDF document text
- http://iluvlocalplaces.com/images/codes-for-skyscraper-tycoon-roblox-that-give-free-money.pdfIn PDF document text
- https://lita-lb.org/images/baldis-basics-free-roblox.pdfIn PDF document text
- https://www.air-shop.cz/images/free-robux-hack-yolasite-com.pdfIn PDF document text
+17 more URL(s)
Extracted artifacts 3
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_003_off00008018.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x8018 | 25712 bytes |
SHA-256: f621bbd21774f8d06ea63f2de0c8aec41bc3b1dd7a65505949e43ccbe7072c32 |
|||
font_01_sfnt_off0000bad6.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xBAD6 | 3312 bytes |
SHA-256: 40bd8eebcb3a0d68a8646f1930e84f30a44bfa48525263c6c528f0bc1e9c1677 |
|||
font_02_sfnt_off0000c626.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xC626 | 18840 bytes |
SHA-256: ba3e0d3834c2907e9ad89d366d41f3bdef5e5952cefce4489e6c51b25da1aadf |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.