Malicious PDF — malware analysis report

Heuristics 4

• PDF links to a 'free generator / game hack' redirector critical PDF_GAME_HACK_REDIRECT_LURE
  PDF's clickable action targets a redirector of the form /app/<id>/<slug>-game-hack — the landing-page shape of a large SEO 'free spins / generator / game hack' lure family that funnels victims through rotating disposable hosts to a malware/scam payload. The multi-link variants also trip ML/link-farm rules; this catches the single-link variants that otherwise score clean. CRITICAL on its own: the /app/<id>/<slug>-game-hack path shape is unambiguous scam infra, and the host rotates so a host-list match can't be relied on.
• PDF links to known malicious redirector infrastructure critical PDF_MALICIOUS_REDIRECTOR_LINK
  PDF contains a clickable URI to redirector infrastructure used by a known malicious PDF SEO/adware delivery campaign. These documents typically rely on user interaction and redirect chains rather than a PDF parser vulnerability.
• Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTON
  Document contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
• Embedded URL info EMBEDDED_URL
  One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
  URL https://netcdn.xyz/app/431946152/is-there-any-way-to-get-free-robux-game-hack In PDF document text

  • https://javisintlmedia.com/images/free-robux-gift-card-codes-2021_GM431946152.pdfIn PDF document text
  • https://javisintlmedia.com/images/bloxawards-com-earn-free-robux_GM431946152.pdfIn PDF document text
  • https://javisintlmedia.com/images/minecraft-app-free-download_GM479516143.pdfIn PDF document text
  • https://javisintlmedia.com/images/what-games-give-you-robux_GM431946152.pdfIn PDF document text
  • https://javisintlmedia.com/images/202100-free-spins-coin-master_GM406889139.pdfIn PDF document text
  • https://javisintlmedia.com/images/free-coin-coin-master_GM406889139.pdfIn PDF document text
  • https://javisintlmedia.com/images/free-shirt-roblox_GM431946152.pdfIn PDF document text
  • https://javisintlmedia.com/images/how-to-get-minecraft-for-free-on-android_GM479516143.pdfIn PDF document text
  • https://javisintlmedia.com/images/free-robux-hack-no-human-verification_GM431946152.pdfIn PDF document text
  • https://javisintlmedia.com/images/free-robux-with-no-verification-2021_GM431946152.pdfIn PDF document text
  • https://javisintlmedia.com/images/how-to-hack-coin-master-apple_GM406889139.pdfIn PDF document text
  • https://javisintlmedia.com/images/coin-master-game-free-play-online_GM406889139.pdfIn PDF document text
  • https://javisintlmedia.com/images/how-to-get-free-robux-without-verification-or-surveys_GM431946152.pdfIn PDF document text
  • https://javisintlmedia.com/images/80-free-spins-coin-master_GM406889139.pdfIn PDF document text
  • https://javisintlmedia.com/images/free-robux-live_GM431946152.pdfIn PDF document text
  • https://javisintlmedia.com/images/coin-master-free-redeem-code_GM406889139.pdfIn PDF document text
  • https://javisintlmedia.com/images/coin-master-official-page_GM406889139.pdfIn PDF document text
  • https://javisintlmedia.com/images/coin-master-free-spins-2021-generator_GM406889139.pdfIn PDF document text
  • https://javisintlmedia.com/images/100-free-spins-coin-master_GM406889139.pdfIn PDF document text
  • https://javisintlmedia.com/images/easy-robux-today-com_GM431946152.pdfIn PDF document text
  • http://192.168.0.99/%20%3Cp%3E%3Cp%3ERoblox%20Twisted%20Murderer%20Admin%20Script%20Roblox%20Jailbreak%20Hack.%20Leak%20Op%20Twisted%20Murder%20Gui%20Op%20Af.%20Roblox%20Arsenal%20Hack%20Script%20Pastebin%20Roblox%20T%20Shirt%20Maker%20Free.%20Roblox%20Twisted%20Murderer%20Script%20Working%20Script%20In%20Desc%20And%20Giveaway%20Next%20Week.%3Cp%3E%3Cp%3EHow%20To%20Hack%20Roblox%20Lumber%20Tycoon%202%20Money%20Using%20Cheat%20Engine%20Th%20Clip.%20roblox%20exploit%20hack%20skisploit%20v6%20lua%20gui%20hack%20lumber%20tycoon%202%20for%20gui%20fly%20tp%20others%2010%2010%2018.%20Skachat%20Lumber%20Tycoon%202%20Gui%20Free%20Script%20Download%20Tp%20Dupe.%3Cp%3E%3Cp%3ERoblox%20Fe%20Grab%20Knife.%20Roblox%20Earrape%20Script%20Roblox%20Generator%20Font.%20Roblox%20Responds%20To%20The%20Hack%20That%20Allowed%20A%20Childs%20Avatar%20To.%20V%20Video%20Games%20Archive%20Thread%20423969727.%3Cp%3E%3Cp%3EFree%20Roblox,%20coc%20and%20clash%20of%20clans,%20fortnite,%20gmail,%20instagram,%20spotify,%20keep2share%20,Onlyfans,%20Minecraft%20accounts%20and%20passwords%20list%202020.%3Cp%3E%3Cp%3EDragon%20Ball%20Rage%20New%20Omni%20And%20Jiren%20Mode.%20Dragon%20ball%20rage%20trolling%20roblox.%20Hack%20Para%20Tener%20Todos%20Los%20Stast%20En%20Dragon%20Ball%20Rage%20En%2030%20Minutos%20By.%20Hack%20para%20tener%20todos%20los%20stast%20en%20dragon%20ball%20rage%20en%2030%20minutos%20by%20cesarius%20roblox.%20New%20Hack%20On%20Roblox%20Any%20Game%20With%20Cheat%20Engine.%3Cp%3E%3Cp%3EGet%20Free%20Roblox%20Accounts%20now%20with%20our%20list%20of%20free%20usernames%20and%20passwords%20that%20we%20have.%20Method%203:%20Access%20Free%20Roblux%20Accounts%20With%20InboxDollars.%20InboxDollars,%20the%20best%20method%20to%20get%20a%20free%20premium%20account.%20Do%20visit%20the%20official%20website%20of%20InboxDollars%20and%20follow%20the%20steps%20listed%20below%3Cp%3E%3Cp%3Eroblox%20rcm%20free%20trial%3Cp%3E%3Cp%3EDownload%20Hack!%20Shadow%20Free%20Powerfull%20ROBLOX%20CHEAT%20A%20Cheat%20with%20Special%20Functions%20like%20Multiple%20execution%In PDF document text
  • http://en.wikipedia.org/wiki/MIT_LicenseIn PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.