MALICIOUS
82
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
This PDF document was flagged as malicious by an ML classifier. The file routes users through malicious redirector infrastructure and presents a deceptive download button. Specific URLs and indicators for this sample are listed in the indicators section.
Machine Learning
- Nyx PDF Classifier malicious score 0.8721
Heuristics 4
-
PDF links to a 'free generator / game hack' redirector high PDF_GAME_HACK_REDIRECT_LUREPDF's clickable action targets a redirector of the form /app/<id>/<slug>-game-hack — the landing-page shape of a large SEO 'free spins / generator / game hack' lure family that funnels victims through rotating disposable hosts to a malware/scam payload. The multi-link variants also trip ML/link-farm rules; this catches the single-link variants that otherwise score clean.
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL https://enigmagenerator.com/app/431946152/roblox-game-hack PDF link annotation
- http://columbuscigar.com/images/real-robux-hack-no-survey-2021-febuary.pdfIn PDF document text
- https://bapalaye.org/images/hack-roblox-no-chash.pdfIn PDF document text
- http://sfsbm.org/images/free-10-dollar-roblox-card.pdfIn PDF document text
- http://brusivojimi.com/images/roblox-troll-shirt-free.pdfIn PDF document text
- https://www.wijhalenhetop.nl/images/roblox-free-robux-mod-menu.pdfIn PDF document text
- http://lawnn.ru/images/can-i-download-roblox-for-free-right-now.pdfIn PDF document text
- https://www.yewtreealpacas.co.uk/images/how-to-get-free-robux-by-doing-this.pdfIn PDF document text
- http://www.lionel-seppoloni.fr/images/roblox-hack-cheat-tool-v12.pdfIn PDF document text
- https://elite-house.su/images/free-robux-hack-on-laptop.pdfIn PDF document text
- http://cmme.it/images/free-kitty-roblox.pdfIn PDF document text
- http://bemviverclin.com.br/images/https-roblox-hackcom.pdfIn PDF document text
- https://estalagemmonteverde.com.br/images/free-robux-websites-no-scam.pdfIn PDF document text
- http://infoagronomia.com.ar/images/hacks-for-design-it-roblox.pdfIn PDF document text
- http://leigraphics.com/images/how-to-get-free-gear-on-roblox-high-school.pdfIn PDF document text
- http://www.fanciullovito.it/images/roblox-play-paid-games-for-free.pdfIn PDF document text
- http://scarlier.fr/images/rblx-gg-roblox-free.pdfIn PDF document text
- http://www.drent.se/images/como-hackear-uma-conta-do-roblox.pdfIn PDF document text
- https://sanjoseelectricians.net/images/dayz-roblox-item-hack.pdfIn PDF document text
- http://edelektronarzedzia.pl/images/how-to-look-like-a-wannabe-hacker-on-roblox.pdfIn PDF document text
- https://sitam.co.in/images/hacking-roblox-with-brutus.pdfIn PDF document text
- http://vagency.us/images/f7-roblox-hack-download.pdfIn PDF document text
- http://cosmosdawn.net/images/can-roblox-ip-ban-you-for-hacking.pdfIn PDF document text
- http://jaeger-bauplanung.de/images/free-roblox-code-generator-no-download-no-survey.pdfIn PDF document text
- https://www.lomrad.go.th/images/game-cards-roblox-free.pdfIn PDF document text
- http://bagna.pl/images/hack-de-roblox-2021-jailbreak.pdfIn PDF document text
- http://bestmaids.co.uk/images/roblox-big-paintball-hack-2021.pdfIn PDF document text
- http://muko-unterfranken.info/images/auto-kill-hack-roblox-assassin-2021.pdfIn PDF document text
- http://leigraphics.com/images/life-in-paradise-roblox-hacks.pdfIn PDF document text
- http://www.actae.gr/images/ash-greninja-free-shopping-in-roblox.pdfIn PDF document text
- https://inspiration-modellbau.de/images/how-to-get-free-robux-without-doing-anything.pdfIn PDF document text
- http://vipservice-bg.com/images/all-the-free-hair-in-roblox.pdfIn PDF document text
- http://shinarb.by/images/how-to-know-if-a-place-uses-free-models-roblox.pdfIn PDF document text
- https://arcasict.nl/images/how-to-get-group-clothes-free-on-roblox.pdfIn PDF document text
- http://ambingenieria.com/images/free-rebirths-roblox.pdfIn PDF document text
- https://www.cosmosdawn.net/images/roblox-20-free.pdfIn PDF document text
- http://www.maakherumusic.net/images/how-to-get-1-millon-robux-free.pdfIn PDF document text
- http://brusivojimi.com/images/roblox-hack-pretty-face-hack.pdfIn PDF document text
- http://www.peterdejonge.nl/images/how-to-get-free-roblox-clothes-2021.pdfIn PDF document text
- https://letturatarghe.it/images/free-skins-roblox.pdfIn PDF document text
- https://www.albisser.ch/images/roblox-grab-knife-hack.pdfIn PDF document text
- http://www.friendshiptransport.net/images/free-robux-no-download-or-email.pdfIn PDF document text
- http://elsenorcafe.com.co/images/how-to-equip-the-free-item-in-roblox-deathrun.pdfIn PDF document text
- https://www.hotschool.com.au/images/free-h-robux-aniversery-giveaway.pdfIn PDF document text
- http://gestibrok.com/images/i-want-to-break-free-roblox-music-code.pdfIn PDF document text
- http://www.zdravazena.sk/images/free-robux-inspect-2021.pdfIn PDF document text
- https://gomsa.nl/images/free-robux-scam-websites.pdfIn PDF document text
- http://soma.com.ua/images/free-roblox-girls-stuff.pdfIn PDF document text
- https://www.milewood.co.uk/images/cranberry-roblox-hack-download.pdfIn PDF document text
- http://kulturlandschaften.eu/images/free-robux-and-tix-generator.pdfIn PDF document text
+9 more URL(s)
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_003_off00007058.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x7058 | 27712 bytes |
SHA-256: 3bf9fa995148f89d17971042aa61e81734e7672c6698fca47c0eb18bc81f8100 |
|||
font_01_sfnt_off0000ae6d.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xAE6D | 17860 bytes |
SHA-256: 52393a54689e507cbdd506ffc4af0ef4ac2571d02b02a65df81546c7b2c96bf6 |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.