MALICIOUS
132
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
The PDF contains numerous links and references to game hacks, cheats, and free Robux for the game Roblox. Heuristics indicate it's a link farm designed to lure users to scam sites. While no scripts were explicitly extracted, the nature of the content and the embedded URLs suggest a phishing or scam attempt to monetize user interest in game exploits.
Machine Learning
- Nyx PDF Classifier malicious score 0.6193
Heuristics 5
-
PDF carries distributed game-hack scam link farm critical PDF_GAME_HACK_SEO_LINK_FARMPDF contains a free-generator/game-hack lure together with many external PDF links spread across distinct hosts whose filenames advertise game hacks, cheats, jailbreaks, generators, or free currency. This is a high-confidence scam/SEO-poisoning carrier: the PDF exists to route users into malicious or unwanted download/redirect chains, not to present normal document content.
-
PDF carries game-hack generator link farm medium PDF_GAME_HACK_LINK_FARMPDF contains a gaminggenerator.org app lure together with multiple external PDF links whose filenames advertise game hacks, cheats, jailbreaks, or generators. This is a lure/delivery link farm rather than a PDF exploit: the risk is the linked redirection chain.
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/cheat-code-roblox-vehicle-simulator PDF link annotation
- http://abletrustcare.com/images/free-funny-roblox-shirt.pdfIn PDF document text
- http://famoirs.co.uk/images/roblox-its-free-logo.pdfIn PDF document text
- http://prodajalec.si/images/ban-hacks-in-roblox.pdfIn PDF document text
- http://horsa18.ru/images/how-to-be-a-free-adim-roblox-2021.pdfIn PDF document text
- https://reggieslockandkey.com/images/how-to-hack-roblox-like-john-doe.pdfIn PDF document text
- http://rainbowbuddha.academy/images/hack-robux.pdfIn PDF document text
- https://helsoft.se/images/vehicle-simulator-hack-roblox.pdfIn PDF document text
- http://www.lovecraftiana.com.ar/images/cheat-for-guess-sthat-song-roblox.pdfIn PDF document text
- https://rincondelentrenador.com/images/red-boy-v2-jailbreak-roblox-hack.pdfIn PDF document text
- http://echosvoix.ch/images/robux-gratis-hack-2021.pdfIn PDF document text
- https://www.solucionesdigit.com/images/free-vip-server-for-roblox-gravity-ship.pdfIn PDF document text
- https://www.ncscolour.no/images/free-roblox-accountrs.pdfIn PDF document text
- http://bkd1.balikpapan.go.id/images/roblox-accounts-hacken.pdfIn PDF document text
- https://www.cfdcnv.com/images/free-robux-not-patched.pdfIn PDF document text
- http://reisebild.eu/images/free-roblox-generator.pdfIn PDF document text
- https://www.mrsz.ir/images/roblox-minecraft-game-free.pdfIn PDF document text
- http://uptodate.az/images/robux-gift-card-number-free.pdfIn PDF document text
- https://verdensbarn.no/images/roblox-cheat-elemental-battleground.pdfIn PDF document text
- http://altc.de/images/cheats-for-cars-roblox.pdfIn PDF document text
- http://www.malonmalon.com.ar/images/can-i-make-a-costum-charecter-is-roblox-for-free.pdfIn PDF document text
- http://armportal.co.uk/images/dominus-rex-is-free-not-in-your-inventory-in-roblox.pdfIn PDF document text
- http://jdlwealth.com/images/hey-google-show-me-how-to-get-free-robux.pdfIn PDF document text
- https://newenglandafs.com/images/como-tener-robux-infinitos-sin-hacks.pdfIn PDF document text
- https://ccej.lviv.ua/images/roblox-tower-battle-hack-script.pdfIn PDF document text
- https://asesoriamss.com/images/how-to-hack-alone-batle-royale-with-roblox.pdfIn PDF document text
- http://www.marambio.com.ar/images/how-to-find-out-roblox-speed-code-for-speed-hack.pdfIn PDF document text
- http://apeh.ro/images/cheat-on-roblox-ghost.pdfIn PDF document text
- https://www.acoustiguard.com/images/can-you-hack-someone-roblox.pdfIn PDF document text
- http://eleveurs-autrement.fr/images/roblox-cheat-source-leaked.pdfIn PDF document text
- https://zabota-kashira.ru/images/free-robux-quick-generator.pdfIn PDF document text
- http://www.pcclawyers.com.au/images/roblox-paintball-cheats.pdfIn PDF document text
- https://www.cfdcnv.com/images/free-robux-money.pdfIn PDF document text
- https://amatq.ca/images/roblox-speed-hack-2021.pdfIn PDF document text
- http://bagna.pl/images/free-black-shirt-roblox.pdfIn PDF document text
- http://ivanitskyvs.ru/images/games-that-give-you-free-stuff-on-roblox-2021.pdfIn PDF document text
- https://sectorpravdy.com/images/how-to-hack-roblox-sword-fight-on-the-heights.pdfIn PDF document text
- http://racunari.in.rs/images/how-to-hack-roblox-account-top-9-ways.pdfIn PDF document text
- https://meltonschool.org/images/roblox-id-code-for-cheats-code-for-hoes.pdfIn PDF document text
- http://almacargo.com/images/free-robux-no-human-verification-no-download-no-survey-2021.pdfIn PDF document text
- https://www.elevage-chiot.fr/images/free-robux-hack-app.pdfIn PDF document text
- http://www.inservis.cl/images/how-to-get-freer-package-roblox-2021-july.pdfIn PDF document text
- http://linde-erbach.de/images/games-like-roblox-but-free-and-no-download.pdfIn PDF document text
- https://www.milewood.co.uk/images/case-opener-hack-roblox.pdfIn PDF document text
- http://www.compusiteinc.com/images/hack-in-roblox-download.pdfIn PDF document text
- http://www.colma.it/images/free-hats-roblox-2021.pdfIn PDF document text
- https://corbo.ru/images/como-hackear-roblox-para-tener-robux-gratis.pdfIn PDF document text
- https://www.wijhalenhetop.nl/images/roblox-shirt-free-copy.pdfIn PDF document text
- https://schaefer-rechtsanwaelte.com/images/roblox-apk-hack-2021.pdfIn PDF document text
- https://www.fenews.co.uk/images/free-robux-promo-codes-for-roblox-not-expired.pdfIn PDF document text
+13 more URL(s)
Extracted artifacts 3
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_003_off000080df.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x80DF | 25196 bytes |
SHA-256: 381632aad6c0c8e1e3c6f45ba9a8eec4333468be174d1cd8276070683e6b04ba |
|||
font_01_sfnt_off0000bb5f.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xBB5F | 2832 bytes |
SHA-256: 77ae1c4cffa647a8fd533dfa4102e94364989f9e80b9cd131876e9d1005899a2 |
|||
font_02_sfnt_off0000c50f.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xC50F | 18484 bytes |
SHA-256: e2ac71e996fc845203a6c69fd1934cd54ba6b63192e23aa9b123759c2ccfd169 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.