MALICIOUS
132
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
The PDF contains numerous links to websites offering game hacks and cheats, specifically targeting Roblox. The heuristic firings indicate a link farm designed to lure users to potentially malicious sites. While no scripts were extracted, the document body and embedded URLs strongly suggest a phishing or scam attempt to redirect users to external content.
Machine Learning
- Nyx PDF Classifier malicious score 0.9414
Heuristics 5
-
PDF carries distributed game-hack scam link farm critical PDF_GAME_HACK_SEO_LINK_FARMPDF contains a free-generator/game-hack lure together with many external PDF links spread across distinct hosts whose filenames advertise game hacks, cheats, jailbreaks, generators, or free currency. This is a high-confidence scam/SEO-poisoning carrier: the PDF exists to route users into malicious or unwanted download/redirect chains, not to present normal document content.
-
PDF carries game-hack generator link farm medium PDF_GAME_HACK_LINK_FARMPDF contains a gaminggenerator.org app lure together with multiple external PDF links whose filenames advertise game hacks, cheats, jailbreaks, or generators. This is a lure/delivery link farm rather than a PDF exploit: the risk is the linked redirection chain.
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/roblox-cheat-engine-august-2021 PDF link annotation
- http://www.agri-tech.com.au/images/bot-that-buys-any-free-item-instantly-roblox.pdfIn PDF document text
- http://www.marambio.com.ar/images/delta-hack-roblox.pdfIn PDF document text
- http://hemmet-strand.dk/images/ahmed-roblox-hack.pdfIn PDF document text
- https://www.dierenartsberghman.be/images/how-to-get-free-obc-and-robux-in-roblox.pdfIn PDF document text
- http://sscclc.edu.ec/images/roblox-booga-booga-fly-hack-2021.pdfIn PDF document text
- https://pa-waingapu.go.id/images/free-noclip-hack-for-roblox.pdfIn PDF document text
- http://www.maakherumusic.net/images/cb-ro-hack-roblox.pdfIn PDF document text
- http://www.kalaaliaraq.dk/images/free-skip-animation-roblox.pdfIn PDF document text
- https://www.dierenartsberghman.be/images/free-roblox-money-for-money.pdfIn PDF document text
- https://consorziocsa-asicaivano.it/images/roblox-catalogue-free.pdfIn PDF document text
- http://www.rezbb.sk/images/how-to-hack-any-pokemon-into-project-pokemoin-roblox.pdfIn PDF document text
- http://www.marambio.com.ar/images/roblox-free-candy-song.pdfIn PDF document text
- https://consorziocsa-asicaivano.it/images/hack-for-robux-with-edit-this-cookie.pdfIn PDF document text
- http://ff-obertraun.at/images/free-fedora-roblox.pdfIn PDF document text
- http://www.maakherumusic.net/images/free-promo-codes-roblox-2021.pdfIn PDF document text
- https://www.foodsafety.cz/images/everything-free-on-roblox-catalog.pdfIn PDF document text
- http://www.lycee-langevin-wallon.com/images/roblox-script-executor-download-free.pdfIn PDF document text
- http://domaizdereva24.ru/images/free-account-giveaway-roblox-2021.pdfIn PDF document text
- https://esl.ipb.ac.id/images/cheats-for-the-plaza-roblox.pdfIn PDF document text
- https://corbo.ru/images/claim-free-robux-game-roblox.pdfIn PDF document text
- http://nosocomium.rv.ua/images/how-to-hack-into-your-friends-roblox-account-2021.pdfIn PDF document text
- https://www.albisser.ch/images/el-mejor-video-de-hackear-robux.pdfIn PDF document text
- https://www.hotschool.com.au/images/cheat-dungeon-quest-roblox-20s.pdfIn PDF document text
- http://www.fanciullovito.it/images/www-roblox-com-free-games.pdfIn PDF document text
- https://esl.ipb.ac.id/images/robux-generator-no-survey-no-hack.pdfIn PDF document text
- http://www.mjclautrec.fr/images/free-codes-to-get-robux.pdfIn PDF document text
- http://www.fluidtech.hu/images/free-robux-download-app-verification-hack.pdfIn PDF document text
- https://fkg.usu.ac.id/images/how-to-hack-in-ar-in-roblox.pdfIn PDF document text
- https://fkg.usu.ac.id/images/llogin-to-roblox-for-free.pdfIn PDF document text
- https://crank.ee/images/roblox-boy-hair-free.pdfIn PDF document text
- https://pa-waingapu.go.id/images/fe-hacks-roblox-highschool.pdfIn PDF document text
- http://www.copoint.co.uk/images/hidden-immunity-idol-survivor-roblox-hack.pdfIn PDF document text
- http://www.eurologistiki.gr/images/free-pc-games-like-roblox.pdfIn PDF document text
- https://www.romedia.gr/images/how-to-hack-roblox-flood-escape-2.pdfIn PDF document text
- http://www.exikom.com.ua/images/roblox-builders-club-free-in-2021.pdfIn PDF document text
- http://kids-academy.pl/images/funny-roblox-characters-free.pdfIn PDF document text
- http://www.gadanie.lv/images/free-robux-io.pdfIn PDF document text
- https://www.beaufortcollege.ie/images/how-to-get-free-stuff-on-roblox-with-codes.pdfIn PDF document text
- http://www.fluidtech.hu/images/sandbox-roblox-cheats.pdfIn PDF document text
- http://www.actae.gr/images/free-robux-instantly-no-human-verification.pdfIn PDF document text
- http://www.eurologistiki.gr/images/roblox-hack-to-get-on-accont.pdfIn PDF document text
- https://technospektr.com.ua/images/free-robux-codes-not-used-yet.pdfIn PDF document text
- http://www.inservis.cl/images/free-roblox-code-in-muder-mystery-2.pdfIn PDF document text
- https://www.cpnf.ch/images/free-robux-generator-roblox-2021.pdfIn PDF document text
- https://www.udivadlahotel.cz/images/hacking-roblox-accounts-site.pdfIn PDF document text
- http://www.malonmalon.com.ar/images/free-robux-no-hacking-2021.pdfIn PDF document text
- https://www.udivadlahotel.cz/images/hacks-for-free-robux-on-roblox-no-human-verify.pdfIn PDF document text
- http://hemmet-strand.dk/images/hack-roblox-boku-no-roblox-remastered.pdfIn PDF document text
- https://jdlgroup.ca/images/guess-the-song-roblox-cheat-sheet.pdfIn PDF document text
+2 more URL(s)
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_003_off00005792.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x5792 | 24152 bytes |
SHA-256: 3364dc887d5e9398441667fc25d72d89a0bae94cc30f4ae8db812a6c763942f3 |
|||
font_01_sfnt_off00008eda.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x8EDA | 18660 bytes |
SHA-256: cc42bb3a67e70920772da3af81226f99a26d366d2ff6ef00496d44601e62154d |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.