MALICIOUS
132
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
The PDF document contains numerous links and embedded text related to game hacks and free Robux, indicative of a scam. The heuristic firings, particularly 'PDF_GAME_HACK_SEO_LINK_FARM', confirm the presence of a link farm designed to lure users to malicious websites. While no scripts were extracted, the document's structure and content strongly suggest a phishing or scam attempt, likely delivered as a spearphishing attachment.
Machine Learning
- Nyx PDF Classifier malicious score 0.6193
Heuristics 5
-
PDF carries distributed game-hack scam link farm critical PDF_GAME_HACK_SEO_LINK_FARMPDF contains a free-generator/game-hack lure together with many external PDF links spread across distinct hosts whose filenames advertise game hacks, cheats, jailbreaks, generators, or free currency. This is a high-confidence scam/SEO-poisoning carrier: the PDF exists to route users into malicious or unwanted download/redirect chains, not to present normal document content.
-
PDF carries game-hack generator link farm medium PDF_GAME_HACK_LINK_FARMPDF contains a gaminggenerator.org app lure together with multiple external PDF links whose filenames advertise game hacks, cheats, jailbreaks, or generators. This is a lure/delivery link farm rather than a PDF exploit: the risk is the linked redirection chain.
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/hack-server-vip-robux-gratis PDF link annotation
- http://petarda.hu/images/roblox-free-mobile.pdfIn PDF document text
- https://www.wildpark-johannismuehle.de/images/roblox-hack-gamer.pdfIn PDF document text
- http://poltekkeskhjogja.ac.id/images/roblox-how-to-get-shirt-for-free.pdfIn PDF document text
- https://www.hbproducts.dk/images/roblox-email-reset-hack.pdfIn PDF document text
- http://uptodate.az/images/how-to-get-free-robux-on-a-ipad-2021.pdfIn PDF document text
- https://www.lavigny.ch/images/roblox-hack-2021-pc.pdfIn PDF document text
- http://nevesomost.by/images/roblox-hack-exploit.pdfIn PDF document text
- http://baah.ca/images/roblox-free-download-for-ps4.pdfIn PDF document text
- http://www.remiauclair.fr/images/which-group-has-free-admin-and-vip-on-roblox.pdfIn PDF document text
- https://corbo.ru/images/free-boombox-highschool-2-roblox.pdfIn PDF document text
- http://echosvoix.ch/images/download-free-download-how-to-buy-free-robux.pdfIn PDF document text
- http://w-i-r.de/images/free-roblox-for-roblox.pdfIn PDF document text
- http://www.lascalamilanowallcovering.it/images/free-robux-script-roblox.pdfIn PDF document text
- http://xn----ttbgfkcjc5fd.xn--p1ai/images/free-robux-app-that-sends-code-to-your-email.pdfIn PDF document text
- http://demenagementlandry.com/images/cash-for-apps-free-robux.pdfIn PDF document text
- https://gigbagwinkel.nl/images/skisploit-roblox-hack.pdfIn PDF document text
- https://www.cosmosdawn.net/images/how-i-get-free-robux-rbxrewards.pdfIn PDF document text
- http://www.visiblefilm.com/images/hacks-for-roblox-booga-booga.pdfIn PDF document text
- https://www.mrsz.ir/images/free-accounts-on-roblox-that-have-robux.pdfIn PDF document text
- http://escolaarboc.cat/images/hack-roblox-account-kali-linux.pdfIn PDF document text
- http://uctovnictvosnv.sk/images/assassin-hack-script-roblox.pdfIn PDF document text
- http://www.rezbb.sk/images/free-real-robux-generator.pdfIn PDF document text
- http://agrupamentoescolas-alfredo-da-silva.com/images/best-free-roblox-exploits-2021.pdfIn PDF document text
- http://uptodate.az/images/free-robux-code-inspect.pdfIn PDF document text
- http://dqdq.pl/images/more-free-roblox-jailbreak-vip-servers-link-desc.pdfIn PDF document text
- http://britishcomics.com/images/roblox-download-windows-7-free.pdfIn PDF document text
- http://eooe.gr/images/cheating-on-someone-in-roblox.pdfIn PDF document text
- http://w-i-r.de/images/dragon-ball-galaxy-roblox-hack.pdfIn PDF document text
- http://kancelaria-legnica.eu/images/robloxcom-free-robux-obby.pdfIn PDF document text
- http://sb2m.com.br/images/mobile-hack-roblox-hack.pdfIn PDF document text
- http://www.guidaturisticaverona.it/images/roblox-freebies-hack.pdfIn PDF document text
- https://studentcareerinfo.com/images/free-roblox-t-shitt.pdfIn PDF document text
- http://stackideas.com/images/free-giftcard-codes-roblox.pdfIn PDF document text
- https://www.brainpads.com/images/how-to-get-free-robux-from-a-white-hat.pdfIn PDF document text
- http://brokermortgages.com/images/free-roblox-hided-head.pdfIn PDF document text
- http://msfs-eastafrica.com/images/counter-blox-roblox-offensive-hacks-wall-halks.pdfIn PDF document text
- http://echosvoix.ch/images/free-robux-without-verifacation.pdfIn PDF document text
- http://escolaarboc.cat/images/hack-script-download-roblox.pdfIn PDF document text
- https://www.utalii.ac.ke/images/basketball-free-charactes-in-roblox.pdfIn PDF document text
- https://www.hotschool.com.au/images/roblox-how-to-make-a-gamepass-free-for-someone.pdfIn PDF document text
- http://www.bernerpupping.at/images/roblox-mow-my-lawn-hack.pdfIn PDF document text
- http://sealysports.com/images/roblox-how-to-download-hacks.pdfIn PDF document text
- http://jackson-pr.com/images/cheats-for-bloody-mary-roblox.pdfIn PDF document text
- https://sitam.co.in/images/hackear-prison-life-roblox-2021-pc.pdfIn PDF document text
- http://dos.most.gov.la/images/roblox-robux-hack-without-survey.pdfIn PDF document text
- http://www.vktzunami.cz/images/robloxgiveaway-xyz-free-robux.pdfIn PDF document text
- http://parkinsononline.com/images/how-to-look-like-a-hacker-in-roblox-robux.pdfIn PDF document text
- http://ferienwohnung-walker.de/images/robux-hack-no-buying-apps.pdfIn PDF document text
- https://www.wadowice24.pl/images/denis-free-admin-town-roblox.pdfIn PDF document text
+16 more URL(s)
Extracted artifacts 3
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_003_off000080d6.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x80D6 | 25320 bytes |
SHA-256: 2babdb9cc9e318651aa9b5cf014909ce05dac3bab0a49edf6f29a9fb3164f968 |
|||
font_01_sfnt_off0000bac2.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xBAC2 | 2844 bytes |
SHA-256: baad2f3f6808f4af03fa9398e38c580c8d846f7f773a947d8cc1f39b2753d31a |
|||
font_02_sfnt_off0000c484.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xC484 | 18460 bytes |
SHA-256: b609cacc31a1cca49a542f6b18b7db1bda654b78d7d6a01043fa93360ed8f1f7 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.