MALICIOUS
132
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
The PDF document contains a large number of embedded URLs, many of which are associated with game hacking and free in-game currency scams. The heuristic firings indicate a link farm designed to lure users to potentially malicious sites. While no scripts were explicitly extracted, the nature of the embedded URLs and the 'ML_NYX_PDF_MALICIOUS' flag suggest a malicious intent to redirect users to scam or phishing pages.
Machine Learning
- Nyx PDF Classifier malicious score 0.6193
Heuristics 5
-
PDF carries distributed game-hack scam link farm critical PDF_GAME_HACK_SEO_LINK_FARMPDF contains a free-generator/game-hack lure together with many external PDF links spread across distinct hosts whose filenames advertise game hacks, cheats, jailbreaks, generators, or free currency. This is a high-confidence scam/SEO-poisoning carrier: the PDF exists to route users into malicious or unwanted download/redirect chains, not to present normal document content.
-
PDF carries game-hack generator link farm medium PDF_GAME_HACK_LINK_FARMPDF contains a gaminggenerator.org app lure together with multiple external PDF links whose filenames advertise game hacks, cheats, jailbreaks, or generators. This is a lure/delivery link farm rather than a PDF exploit: the risk is the linked redirection chain.
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/pastabin-free-robux PDF link annotation
- https://www.romedia.gr/images/money-hack-restaurant-tycoon-roblox.pdfIn PDF document text
- http://www.eurologistiki.gr/images/cheats-roblox-bloxburg.pdfIn PDF document text
- http://evro-okna.net/images/free-roblox-account-giveaway-may-7th-2021.pdfIn PDF document text
- http://magistrinfo.ru/images/roblox-prison-life-334-hack-download.pdfIn PDF document text
- http://fiur-malermeister.de/images/haw-to-get-free-stuff-roblox-march-2021.pdfIn PDF document text
- http://pdapanache.com/images/how-to-hack-robux-with-cheat-engine-63-2021.pdfIn PDF document text
- http://portal.crfsp.org.br/images/how-to-get-any-gamepass-for-free-roblox-2021.pdfIn PDF document text
- http://condit-pack.com/images/free-expert-scripters-roblox.pdfIn PDF document text
- http://icomsolutions.com.au/images/free-robux-no-human-verification-2021-or-survey-no-download.pdfIn PDF document text
- https://pa-waingapu.go.id/images/how-to-hack-roblox-to-get-unlimited-robux.pdfIn PDF document text
- http://peche-madagascar.com/images/roblox-knife-script-hack.pdfIn PDF document text
- http://abst-brandschutztechnik.com/images/aether-hack-roblox.pdfIn PDF document text
- http://www.boic.nl/images/free-robux-code-that-work.pdfIn PDF document text
- http://www.cosver.nl/images/roblox-free-vip-server-pet-simulator.pdfIn PDF document text
- http://www.likto.eu/images/youtube-be-a-parkour-ninja-roblox-hack.pdfIn PDF document text
- http://dennemaat.nl/images/roblox-jailbreak-hack-download-mac.pdfIn PDF document text
- http://cosver.eu/images/army-tycoon-hack-roblox.pdfIn PDF document text
- https://gimnaziya6.kz/images/get-free-roblox-clothes-2021.pdfIn PDF document text
- http://www.vktzunami.cz/images/how-to-get-free-robux-28-august-2021.pdfIn PDF document text
- http://poltekkeskhjogja.ac.id/images/how-to-get-free-shirts-and-pants-on-roblox-2021.pdfIn PDF document text
- http://stitchingart.com/images/roblox-the-mad-murderer-chat-voice-free.pdfIn PDF document text
- http://mydevice.com.au/images/robux-gift-card-for-free.pdfIn PDF document text
- http://energotestcontrol.ru/images/how-to-hack-roblox-dragon-ball-rage.pdfIn PDF document text
- https://www.knxuk.org/images/download-hack-on-roblox.pdfIn PDF document text
- http://chartsmart.com.au/images/how-to-hack-survoivr-in-roblox-pc.pdfIn PDF document text
- http://sid3r.com/images/roblox-royale-high-cheats-for-diamonds-2021.pdfIn PDF document text
- http://zarinnameh.ir/images/furious-crafter-roblox-hack.pdfIn PDF document text
- http://s-punkt-objects.de/images/free-2021-roblox-accounts.pdfIn PDF document text
- http://www.eurosan1.ba/images/free-play-roblox-login-online.pdfIn PDF document text
- http://gremihostaleria.cat/images/robux-in-1min-hacken.pdfIn PDF document text
- https://www.laarsenco.nl/images/how-to-hack-in-boku-no-roblox.pdfIn PDF document text
- http://bagna.pl/images/piano-keybard-roblox-hack.pdfIn PDF document text
- https://beejekorf.nl/images/free-robux-no-human-verification-or-offers.pdfIn PDF document text
- https://www.beaufortcollege.ie/images/how-to-hack-into-other-accounts-on-roblox.pdfIn PDF document text
- https://www.tsdb.com.au/images/roblox-twisted-murderer-cheat-engine.pdfIn PDF document text
- http://www.web.stc-part.co.th/images/free-robuxes.pdfIn PDF document text
- http://vedrachemicals.ro/images/download-roblox-hack-pc.pdfIn PDF document text
- http://sealysports.com/images/how-to-hack-free-robux-in-roblox.pdfIn PDF document text
- http://sealysports.com/images/roblox-roblox-escape-room-cheats.pdfIn PDF document text
- https://www.porthos.it/images/free-obc-accounts-roblox.pdfIn PDF document text
- http://cdescolapios.org/images/roblox-exploit-free-executor-2021.pdfIn PDF document text
- https://www.romedia.gr/images/how-to-get-free-items-on-roblox-2021.pdfIn PDF document text
- http://medimacs.eu/images/free-robux-no-survey-easy.pdfIn PDF document text
- https://esl.ipb.ac.id/images/hack-para-todos-los-juegos-de-roblox-2021.pdfIn PDF document text
- http://texnes-plus.gr/images/free-robux-download-2021.pdfIn PDF document text
- http://hotel-buta.by/images/assassin-roblox-hack-script-cheat-engine.pdfIn PDF document text
- https://consorziocsa-asicaivano.it/images/roblox-cheat-engine-hacks-december-2021.pdfIn PDF document text
- http://vagency.us/images/free-robux-no-verification-no-download-2021.pdfIn PDF document text
- https://open-coffee-drimmelen-geertruidenberg.nl/images/my-account-keeps-getting-hacked-on-roblox-what-to-do.pdfIn PDF document text
+18 more URL(s)
Extracted artifacts 3
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_003_off0000807c.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x807C | 25764 bytes |
SHA-256: 583e259c3d4802a15588ac38f39400ed207e1db1aa79ef04b1daf6c29d616279 |
|||
font_01_sfnt_off0000bc68.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xBC68 | 2848 bytes |
SHA-256: 4737c2778a085e0cb49e73f3b054b1a71e3f40720d213b4bfda97f95a31bfbf1 |
|||
font_02_sfnt_off0000c62a.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xC62A | 18208 bytes |
SHA-256: 50305ac24c4afa320f730f8724e4a9ffb246f2051de673eca96ab5c413381a66 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.