MALICIOUS
142
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
T1203 Exploitation for Client Execution
The PDF document contains a large number of links and text related to game hacks and free Robux, impersonating brands like Facebook to trick users. The primary URL, http://gaminggenerator.org/app/431946152/get-free-robux-without-human-verify, is repeatedly present and serves as the main lure. While no scripts were explicitly extracted, the PDF structure and heuristic firings indicate a malicious intent to redirect users to scam websites, likely exploiting vulnerabilities or social engineering tactics.
Machine Learning
- Nyx PDF Classifier suspicious score 0.4925
Heuristics 6
-
PDF carries distributed game-hack scam link farm critical PDF_GAME_HACK_SEO_LINK_FARMPDF contains a free-generator/game-hack lure together with many external PDF links spread across distinct hosts whose filenames advertise game hacks, cheats, jailbreaks, generators, or free currency. This is a high-confidence scam/SEO-poisoning carrier: the PDF exists to route users into malicious or unwanted download/redirect chains, not to present normal document content.
-
Brand-impersonation credential phishing lure high SE_BRAND_CREDENTIAL_PHISHDocument impersonates a well-known consumer brand and uses account-security / verification language ('unusual activity', 'account on hold', 'verify your account') to steer the reader to a credential-harvesting link. Corroborated by: call-to-action link host does not match the impersonated brand: http://gaminggenerator.org/app/431946152/get-free-robux-without-human-verify.
-
PDF carries game-hack generator link farm medium PDF_GAME_HACK_LINK_FARMPDF contains a gaminggenerator.org app lure together with multiple external PDF links whose filenames advertise game hacks, cheats, jailbreaks, or generators. This is a lure/delivery link farm rather than a PDF exploit: the risk is the linked redirection chain.
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/get-free-robux-without-human-verify PDF link annotation
- http://ferienhaus-schmidl.at/images/pokemon-adventures-roblox-cheats.pdfIn PDF document text
- http://kfz-service-etp.de/images/how-to-hack-and-get-money-on-roblox.pdfIn PDF document text
- https://www.seeingindependence.org/images/instalar-hacks-en-roblox.pdfIn PDF document text
- http://elzet-opakowania.pl/images/free-roblox-hacks-2021.pdfIn PDF document text
- https://www.coriglianocalabro.it/images/roblox-royale-high-diamond-hack-2021.pdfIn PDF document text
- http://icomsolutions.com.au/images/hack-for-roblox-dll.pdfIn PDF document text
- https://cintasoeste.com.ar/images/free-bc-roblox-2021.pdfIn PDF document text
- http://hydroconseil.net/images/can-you-upload-an-audio-to-roblox-for-free.pdfIn PDF document text
- https://www.inova-cuisine.fr/images/free-robux-no-offers-or-survey-2021.pdfIn PDF document text
- http://magistrinfo.ru/images/roblox-free-sunglasses.pdfIn PDF document text
- https://lobergetart.se/images/free-robux-youtube-stream.pdfIn PDF document text
- http://elllanorestaurants.com/images/free-walking-animation-roblox.pdfIn PDF document text
- http://www.pcclawyers.com.au/images/how-to-get-free-robux-no-download-2021.pdfIn PDF document text
- http://www.fanciullovito.it/images/cheez-it-cursor-roblox-download-for-free.pdfIn PDF document text
- http://learningarabic.co.uk/images/how-to-join-someones-game-in-roblox-hack.pdfIn PDF document text
- https://schulzpressetext.de/images/easiest-way-to-get-free-robux-2021.pdfIn PDF document text
- http://www.hawler.in/images/robux-app-hack.pdfIn PDF document text
- http://smart-pro.co.uk/images/como-descargar-hack-para-en-roblox.pdfIn PDF document text
- http://butkimloai.com/images/get-free-robux-add-codes.pdfIn PDF document text
- http://ivalor.fr/images/roblox-table-cheat-engine.pdfIn PDF document text
- https://socialvalue.gr/images/roblox-free-redeem-card-code-2021.pdfIn PDF document text
- http://jaeger-bauplanung.de/images/how-to-get-free-robux-on-tablet-easy.pdfIn PDF document text
- http://www.jureclomas.com.ar/images/download-roblox-windows-10-free.pdfIn PDF document text
- https://bancroftandsons.com/images/hoe-to-get-free-robux-2021.pdfIn PDF document text
- http://horsa18.ru/images/youtube-how-to-get-free-robux-easy.pdfIn PDF document text
- https://bgescc.com/images/download-cheat-engine-64-roblox.pdfIn PDF document text
- http://evp-sanorlenok.ru/images/roblox-cheat-apk-mod.pdfIn PDF document text
- http://pourvosvacances.com/images/free-robux-websites-that-scam-you.pdfIn PDF document text
- http://www.mikramarine.gr/images/minish-roblox-hacker.pdfIn PDF document text
- http://zarinnameh.ir/images/how-to-crack-a-password-on-roblox-without-hacks.pdfIn PDF document text
- https://www.coriglianocalabro.it/images/roblox-phantom-forces-hack-free.pdfIn PDF document text
- http://learningarabic.co.uk/images/eli1t3-roblox-free.pdfIn PDF document text
- http://www.drent.se/images/roblox-i-hacked-my-fans.pdfIn PDF document text
- http://rumler.pl/images/roblox-speed-race-hacks.pdfIn PDF document text
- http://www.mediaxin.net/images/speed-hack-roblox-cheat-engine.pdfIn PDF document text
- http://www.gadanie.lv/images/download-roblox-hack-unlimited-robux.pdfIn PDF document text
- http://kfz-service-etp.de/images/how-to-get-free-hat-in-roblox-2021.pdfIn PDF document text
- http://www.bbnest.it/images/robux-plus-hack.pdfIn PDF document text
- http://eventgo.fr/images/free-headless-horseman-roblox.pdfIn PDF document text
- http://energotestcontrol.ru/images/how-to-hack-free-robux-on-ipad.pdfIn PDF document text
- https://www.brainpads.com/images/free-glitch-murder-mystery-free-knifes-roblox.pdfIn PDF document text
- http://www.vktzunami.cz/images/free-robux-codes-no-download-no-survey.pdfIn PDF document text
- http://interpretation-dessins-enfants.net/images/can-you-charge-robux-if-you-are-free-user.pdfIn PDF document text
- http://axia-verlag.at/images/how-to-make-roblox-clothes-free.pdfIn PDF document text
- http://fa-deco.com/images/how-to-get-free-rthro-in-roblox.pdfIn PDF document text
- http://wcasrock.org/images/jukebox-free-script-roblox.pdfIn PDF document text
- http://fairwaygolftravel.co.uk/images/free-money-in-roblox-jailbreak.pdfIn PDF document text
- https://www.abrapppe.org.br/images/free-robux-and-limiteds-hack.pdfIn PDF document text
- http://ilijakom.com/images/free-doge-roblox.pdfIn PDF document text
+11 more URL(s)
Extracted artifacts 3
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_004_off0000864c.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x864C | 26444 bytes |
SHA-256: 64ed7cace884fc4a4e758432a37cb5475e958c7727622134130c9c537e36b578 |
|||
font_01_sfnt_off0000c1a7.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xC1A7 | 2848 bytes |
SHA-256: 4737c2778a085e0cb49e73f3b054b1a71e3f40720d213b4bfda97f95a31bfbf1 |
|||
font_02_sfnt_off0000cb6a.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xCB6A | 18960 bytes |
SHA-256: 83c39c2350bfadba2527e038cf6c66f46aaf695c0f04fa506da28cf40930e129 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.