MALICIOUS
140
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
The PDF contains numerous links to websites that appear to be part of a link farm or scam operation, specifically targeting users interested in Roblox hacks and free Robux. The heuristic firings indicate a 'game hack scam link farm' and 'external URI' usage, strongly suggesting the document's purpose is to redirect users to potentially malicious or scam-related content. While no scripts were extracted, the document body and heuristics point to a social engineering attack aiming to lure users through deceptive promises.
Machine Learning
- Nyx PDF Classifier malicious score 0.6193
Heuristics 6
-
PDF carries distributed game-hack scam link farm critical PDF_GAME_HACK_SEO_LINK_FARMPDF contains a free-generator/game-hack lure together with many external PDF links spread across distinct hosts whose filenames advertise game hacks, cheats, jailbreaks, generators, or free currency. This is a high-confidence scam/SEO-poisoning carrier: the PDF exists to route users into malicious or unwanted download/redirect chains, not to present normal document content.
-
PDF carries game-hack generator link farm medium PDF_GAME_HACK_LINK_FARMPDF contains a gaminggenerator.org app lure together with multiple external PDF links whose filenames advertise game hacks, cheats, jailbreaks, or generators. This is a lure/delivery link farm rather than a PDF exploit: the risk is the linked redirection chain.
-
Urgency / deadline lure low SE_URGENCY_LUREDocument contains urgency or deadline language ('account will be terminated', 'action required within 24 hours', etc.) — useful context, but low-signal without other findings
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/sword-fighting-tournament-roblox-hack PDF link annotation
- http://magistrinfo.ru/images/roblox-city-free.pdfIn PDF document text
- https://www.nema.go.ke/images/when-does-roblox-heroes-online-go-free-release.pdfIn PDF document text
- http://ims-77.fr/images/hacks-injector-roblox.pdfIn PDF document text
- http://linde-erbach.de/images/obby-co-nf-free-robux.pdfIn PDF document text
- http://cosver.eu/images/como-hackear-robux-en-roblox-facil-y-rapido.pdfIn PDF document text
- http://www.apocalissedigesucristo.com/images/how-to-draw-on-free-draw-roblox.pdfIn PDF document text
- http://escolaarboc.cat/images/how-to-cheat-in-robux.pdfIn PDF document text
- https://www.anagoria.com/images/comment-avoir-robux-gratuit-2021-sur-pc-facilement-free.pdfIn PDF document text
- https://www.clarence-rockland.com/images/easy-and-fast-quickest-way-to-get-free-robux.pdfIn PDF document text
- http://rwathia.com/images/how-to-get-robux-fast-for-free.pdfIn PDF document text
- https://www.fhccu.com/images/free-hair-roblox-codes.pdfIn PDF document text
- http://swibome.nl/images/roblox-tix-hack-no-download.pdfIn PDF document text
- https://fkg.usu.ac.id/images/how-to-spam-without-notepad-and-hacking-roblox.pdfIn PDF document text
- http://stackideas.com/images/free-roblox-hack-generator.pdfIn PDF document text
- http://pescatun.es/images/games-on-roblox-where-you-win-a-free-stuff.pdfIn PDF document text
- http://www.occquimica.com.br/images/how-to-hack-money-tycoons-on-roblox-2021.pdfIn PDF document text
- https://texcarmats.com/images/roblox-robux-hack-with-cheat-engine-64.pdfIn PDF document text
- http://www.likto.eu/images/how-to-hack-into-someones-roblox-account-2021.pdfIn PDF document text
- http://alpen-seeblick.at/images/how-to-get-free-robux-december-2021.pdfIn PDF document text
- http://fa-deco.com/images/claim-free-robux-no-password.pdfIn PDF document text
- http://www.boic.nl/images/inspect-to-get-free-robux.pdfIn PDF document text
- https://ogm-goettingen.de/images/free-roblox-hacks-for-jailbreak.pdfIn PDF document text
- http://www.e-lysis.com/images/1x1x1x1-roblox-hack.pdfIn PDF document text
- http://solidkom.ch/images/free-roblox-accounts-with-robux-2021-october.pdfIn PDF document text
- http://androidthai.in.th/images/super-jump-cheat-roblox-jailbreak.pdfIn PDF document text
- http://vagency.us/images/this-roblox-game-gives-you-free-robux.pdfIn PDF document text
- http://kruiz21.ru/images/cheat-engine-hxd-roblox.pdfIn PDF document text
- http://belagrogen.by/images/roblox-hacker-on-urbis.pdfIn PDF document text
- http://www.nielsen2u.dk/images/proxy-site-free-robux.pdfIn PDF document text
- https://socialvalue.gr/images/ahk-roblox-hack.pdfIn PDF document text
- http://www.gongoff.com/images/cheats-for-mm2-roblox.pdfIn PDF document text
- http://rafaelmontesinos.com/images/how-to-hack-hair-in-roblox.pdfIn PDF document text
- http://pdia.de/images/free-codes-for-roblox-laser-knife-for-twisted-murderer.pdfIn PDF document text
- https://zapoj-kharkov.com.ua/images/roblox-cheat-enginescript-injector.pdfIn PDF document text
- https://www.beaufortcollege.ie/images/free-promo-codes-for-robuxs.pdfIn PDF document text
- http://feuerwehr-rheinau.de/images/free-robux-mega-hack.pdfIn PDF document text
- https://www.stkdb.cz/images/roblox-noclip-hack-download-ro-boxing.pdfIn PDF document text
- http://sandra-masemann.de/images/roblox-free-white-hair.pdfIn PDF document text
- https://enpav.it/images/free-robux-yt.pdfIn PDF document text
- https://kierowcyhgv.uk/images/how-to-get-free-robux-on-roblox-2021-june.pdfIn PDF document text
- http://www.exikom.com.ua/images/roblox-free-superhero-body.pdfIn PDF document text
- http://techmobil.pl/images/robux-adder-hack.pdfIn PDF document text
- http://lichtdrukkerijwijchen.nl/images/how-to-get-free-robux-secret-discovered-on-roblox.pdfIn PDF document text
- https://belixconstructions.com.au/images/how-to-get-free-robux-by-watching-ads.pdfIn PDF document text
- http://dsmpublishing.biz/images/how-to-get-the-hacker-egg-roblox.pdfIn PDF document text
- https://belixconstructions.com.au/images/free-robux-in-five-minutes.pdfIn PDF document text
- http://kruiz21.ru/images/roblox-obby-for-free-robux.pdfIn PDF document text
- https://www.sitiwebjoomla.it/images/how-to-get-free-robux-not-downloads.pdfIn PDF document text
- http://nevesomost.by/images/free-robux-for-offers.pdfIn PDF document text
+9 more URL(s)
Extracted artifacts 3
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_003_off000082cb.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x82CB | 25372 bytes |
SHA-256: 3dc614a9a657de7f75bf1317f612d676fea7297d73ddc08e3d980abd2496400f |
|||
font_01_sfnt_off0000bb9d.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xBB9D | 2832 bytes |
SHA-256: 77ae1c4cffa647a8fd533dfa4102e94364989f9e80b9cd131876e9d1005899a2 |
|||
font_02_sfnt_off0000c54d.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xC54D | 19296 bytes |
SHA-256: 73dcfa332635ef1eb06a686955608875aa6b86a958db737ade2982bf016d9b80 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.