MALICIOUS
132
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
The PDF document contains numerous links to websites that appear to be related to game hacks and free in-game currency, specifically for Roblox. The heuristic 'PDF_GAME_HACK_SEO_LINK_FARM' indicates a link farm designed to lure users. While no scripts were extracted, the document body and heuristics strongly suggest a phishing or scamming attempt to direct users to potentially malicious sites.
Machine Learning
- Nyx PDF Classifier malicious score 0.9500
Heuristics 5
-
PDF carries distributed game-hack scam link farm critical PDF_GAME_HACK_SEO_LINK_FARMPDF contains a free-generator/game-hack lure together with many external PDF links spread across distinct hosts whose filenames advertise game hacks, cheats, jailbreaks, generators, or free currency. This is a high-confidence scam/SEO-poisoning carrier: the PDF exists to route users into malicious or unwanted download/redirect chains, not to present normal document content.
-
PDF carries game-hack generator link farm medium PDF_GAME_HACK_LINK_FARMPDF contains a gaminggenerator.org app lure together with multiple external PDF links whose filenames advertise game hacks, cheats, jailbreaks, or generators. This is a lure/delivery link farm rather than a PDF exploit: the risk is the linked redirection chain.
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/cheat-engine-cheat-tables-for-roblox PDF link annotation
- http://www.zdravazena.sk/images/free-robux-dezs-nuts.pdfIn PDF document text
- http://www.adravietnam.org/images/is-hacking-on-roblox-illegal.pdfIn PDF document text
- https://socialvalue.gr/images/free-robux-generator-2021-no-verification.pdfIn PDF document text
- http://www.sanjosedeminas.gob.ec/images/fly-gamepass-for-free-on-roblox.pdfIn PDF document text
- http://ff-obertraun.at/images/cheat-roblox-dungeon-quest-installer.pdfIn PDF document text
- http://www.cosver.nl/images/unendlich-robux-hack.pdfIn PDF document text
- https://jdlgroup.ca/images/roblox-free-giveaway-live.pdfIn PDF document text
- http://www.awakeningtruth.org/images/army-roblox-free-play.pdfIn PDF document text
- https://www.hbproducts.dk/images/free-roblox-redeem-card-codes-2021.pdfIn PDF document text
- https://www.ncscolour.no/images/free-robux-website-without-human-verification.pdfIn PDF document text
- http://www.kalaaliaraq.dk/images/free-robux-easy-to-get.pdfIn PDF document text
- https://amatq.ca/images/hack-for-knights-revenge-roblox.pdfIn PDF document text
- http://nosocomium.rv.ua/images/get-free-robux-instantly.pdfIn PDF document text
- https://www.udivadlahotel.cz/images/roblox-viechle-simulator-how-to-get-free-cars.pdfIn PDF document text
- http://www.zdravazena.sk/images/roblox-online-robux-hack.pdfIn PDF document text
- https://www.stkdb.cz/images/hack-apk-roblox.pdfIn PDF document text
- http://www.mjclautrec.fr/images/roblox-cheat-engine-for-mac.pdfIn PDF document text
- http://www.kalaaliaraq.dk/images/roblox-egg-farm-simulator-comment-obtenir-des-oeufs-noirs-cheat.pdfIn PDF document text
- https://www.academiaanticorrupcion.org/images/make-free-robux.pdfIn PDF document text
- https://socialvalue.gr/images/roblox-pc-hack-2021.pdfIn PDF document text
- https://estalagemmonteverde.com.br/images/is-it-illegal-to-hack-robux.pdfIn PDF document text
- http://www.rezbb.sk/images/redeem-card-2021-robux-free.pdfIn PDF document text
- http://www.mikramarine.gr/images/hacks-on-robloxs.pdfIn PDF document text
- https://kimolos-link.gr/images/free-run-animation-roblox.pdfIn PDF document text
- https://meltonschool.org/images/roblox-money-cheat-rocitizens.pdfIn PDF document text
- https://www.sitiwebjoomla.it/images/roblox-car-suspension-free.pdfIn PDF document text
- http://escolaarboc.cat/images/get-robux-free-no-survey-waiting.pdfIn PDF document text
- https://www.dierenartsberghman.be/images/cheat-codes-build-a-boat-roblox.pdfIn PDF document text
- http://kruiz21.ru/images/gamehackbiz-roblox.pdfIn PDF document text
- http://www.cbgp.upm.es/images/roblox-free-danlod.pdfIn PDF document text
- http://en.wikipedia.org/wiki/MIT_LicenseIn extracted file (font_00_sfnt_off0000439e.bin)
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
font_00_sfnt_off0000439e.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x439E | 26336 bytes |
SHA-256: 9bf090282a818f3b0fae1053d89830821f211f49a94257a9f82682c9d7bcf13c |
|||
font_01_sfnt_off00007e00.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x7E00 | 18440 bytes |
SHA-256: 351f14639030776f58856bd1392652efb60464df4c89d0d3619593a4241ed712 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.