SUSPICIOUS
42
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
The PDF document contains numerous URLs related to 'Robux hacks' and 'free Robux', indicating a lure for users interested in obtaining in-game currency. The ML classifier strongly flagged this PDF as malicious, and the presence of external URIs suggests an attempt to redirect the user to a potentially harmful website. The document body, though partially corrupted, contains text and URLs consistent with a scam or phishing attempt.
Machine Learning
- Nyx PDF Classifier malicious score 0.9723
Heuristics 3
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/how-to-get-free-robux-2021-upatchable PDF link annotation
- https://consorziocsa-asicaivano.it/images/roblox-super-jump-hack.pdf%0AIn PDF document text
- https://www.fhccu.com/images/roblox-gainer-free.pdf%0AIn PDF document text
- http://portal.crfsp.org.br/images/rolbox-hacks-for-robux.pdf%0AIn PDF document text
- http://www.malonmalon.com.ar/images/roblox-hotel-elephant-infinite-money-hack.pdf%0AIn PDF document text
- https://pemadamapi.net/images/thing-for-free-on-roblox.pdf%0AIn PDF document text
- https://www.millatgears.com/images/cheat-codes-for-adopt-me-on-roblox.pdf%0AIn PDF document text
- http://agrao.in/images/roblox-saber-sim-hacks.pdf%0AIn PDF document text
- https://www.mvp.co.nz/images/how-to-get-free-robux-real-true.pdf%0AIn PDF document text
- http://www.hawler.in/images/hack-roblox-sin-virus.pdf%0AIn PDF document text
- https://www.milewood.co.uk/images/get-free-robux-windows-10.pdf%0AIn PDF document text
- https://www.foodsafety.cz/images/free-pokemon-t-shirts-roblox.pdf%0AIn PDF document text
- http://axia-verlag.at/images/free-roblox-itesms.pdf%0AIn PDF document text
- http://energotestcontrol.ru/images/roblox-obby-free.pdf%0AIn PDF document text
- http://cdescolapios.org/images/roblox-cheat-engine-esp.pdf%0AIn PDF document text
- http://www.agri-tech.com.au/images/how-to-get-free-robuxs-by-surveys.pdf%0AIn PDF document text
- http://www.eaapiaria.es/images/how-to-get-a-free-knive-in-roblox-cbro.pdf%0AIn PDF document text
- http://uptodate.az/images/roblox-lua-script-hacks.pdf%0AIn PDF document text
- http://www.htc.edu.au/images/apocalypse-rising-roblox-hack-25-frevrier-2021.pdf%0AIn PDF document text
- http://ff-obertraun.at/images/how-to-be-a-builder-club-on-roblox-free.pdf%0AIn PDF document text
- http://www.rezbb.sk/images/roblox-phantom-forces-all-guns-free-and-attachments.pdf%0AIn PDF document text
- https://pa-waingapu.go.id/images/free-roblox-accounts-lost-pin.pdf%0AIn PDF document text
- https://www.academiaanticorrupcion.org/images/roblub-for-free-on-roblox-100-working-2021.pdf%0AIn PDF document text
- https://accord.kiev.ua/images/mage-free-hack-roblox.pdf%0AIn PDF document text
- https://www.sitiwebjoomla.it/images/roblox-hack-pour-avoir-des-robux-2021-pc.pdf%0AIn PDF document text
- https://www.hotschool.com.au/images/easy-robux-today-hack-2021.pdf%0AIn PDF document text
- https://estalagemmonteverde.com.br/images/roblox-how-to-make-a-private-server-for-free.pdf%0AIn PDF document text
- http://poltekkeskhjogja.ac.id/images/robux-online-free.pdf%0AIn PDF document text
- http://serviio.org/images/hack-roblox-diamond.pdf%0AIn PDF document text
- http://svp-steinmaur.ch/images/roblox-vehicle-simulator-cheat-money-cheat-engine.pdf%0AIn PDF document text
- http://www.drent.se/images/roblox-adidas-hoodie-free.pdf%0AIn PDF document text
- http://en.wikipedia.org/wiki/MIT_LicenseIn PDF document text
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_002_off0000343e.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x343E | 19548 bytes |
SHA-256: 3b8b67c4141457f4ef0f87cc91ab9b15c843f94d1221c2885761de0cba3277c2 |
|||
font_01_sfnt_off00005d82.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x5D82 | 18884 bytes |
SHA-256: c91db398e0b2cbe46526772ecf24c6f2e1001e4eb24919b340af59c558849baf |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.