MALICIOUS
132
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
T1204.002 Malicious Link
The PDF contains a large number of embedded URLs, identified by the PDF_GAME_HACK_SEO_LINK_FARM heuristic, that all point to websites offering game hacks and cheats. The document body also repeats these URLs, reinforcing the lure. The presence of a visual download button further suggests an attempt to trick the user into interacting with these malicious links.
Machine Learning
- Nyx PDF Classifier malicious score 0.7795
Heuristics 5
-
PDF carries distributed game-hack scam link farm critical PDF_GAME_HACK_SEO_LINK_FARMPDF contains a free-generator/game-hack lure together with many external PDF links spread across distinct hosts whose filenames advertise game hacks, cheats, jailbreaks, generators, or free currency. This is a high-confidence scam/SEO-poisoning carrier: the PDF exists to route users into malicious or unwanted download/redirect chains, not to present normal document content.
-
PDF carries game-hack generator link farm medium PDF_GAME_HACK_LINK_FARMPDF contains a gaminggenerator.org app lure together with multiple external PDF links whose filenames advertise game hacks, cheats, jailbreaks, or generators. This is a lure/delivery link farm rather than a PDF exploit: the risk is the linked redirection chain.
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
External URI info PDF_URIPDF contains an external URL action
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://gaminggenerator.org/app/431946152/roblox-counter-blox-skin-hack PDF link annotation
- http://bibliotheque-perrigny-les-dijon.fr/images/pastebin-free-robux-hack-2021.pdfIn PDF document text
- https://www.osoc.com/images/roblox-arcane-adventures-hack.pdfIn PDF document text
- http://fairwaygolftravel.co.uk/images/pagina-de-hack-para-robux-gratis.pdfIn PDF document text
- http://www.fanciullovito.it/images/hack-facile-sur-roblox.pdfIn PDF document text
- http://moralcenter.or.th/images/how-to-get-money-for-free-on-adopt-me-roblox.pdfIn PDF document text
- http://goosesscuba.com/images/roblox-name-chace-hack.pdfIn PDF document text
- http://bullyinformate.org/images/gear-online-hack-scripts-roblox.pdfIn PDF document text
- http://armatrutz.de/images/how-to-get-free-robux-cards.pdfIn PDF document text
- http://fradiomas.com/images/roblox-points-hack.pdfIn PDF document text
- https://www.colditex.com/images/fiddler-hacks-for-roblox.pdfIn PDF document text
- http://lichtdrukkerijwijchen.nl/images/free-roblox-gift-card-codes-2021-unused.pdfIn PDF document text
- http://www.adravietnam.org/images/free-camera-roblox.pdfIn PDF document text
- https://gomsa.nl/images/roblox-how-to-make-a-tshirt-free.pdfIn PDF document text
- http://salantiskis.lt/images/free-robux-only-today-ad.pdfIn PDF document text
- http://kingmusic.pl/images/roblox-hack-apk-ios.pdfIn PDF document text
- https://consorziocsa-asicaivano.it/images/codigos-paa-hackear-roblox.pdfIn PDF document text
- https://fkg.usu.ac.id/images/is-it-safe-to-get-free-robux.pdfIn PDF document text
- http://portal.crfsp.org.br/images/roblox-login-with-these-free-accounts.pdfIn PDF document text
- https://www.najeebqasmi.com/images/veil-roblox-exploit-free-download.pdfIn PDF document text
- http://force-seniorklub.dk/images/ancient-earth-hack-roblox.pdfIn PDF document text
- http://www.occquimica.com.br/images/how-to-stop-roblox-from-crashing-when-using-hacks.pdfIn PDF document text
- https://www.ncscolour.no/images/free-roblox-meme.pdfIn PDF document text
- http://schrichte.de/images/roblox-free-robux-2021-august-promocode-yt.pdfIn PDF document text
- http://echosvoix.ch/images/robux-computer-hack.pdfIn PDF document text
- http://ferienwohnung-walker.de/images/how-to-get-free-robux-with-roblox-redeem-card.pdfIn PDF document text
- https://verdensbarn.no/images/hacking-cheats-for-roblox.pdfIn PDF document text
- http://a1scan3d.com/images/db-af-roblox-free-htc.pdfIn PDF document text
- https://asesoriamss.com/images/ben-10-cheats-roblox.pdfIn PDF document text
- http://www.les2alpes-location.com/images/how-to-advertise-your-roblox-game-for-free.pdfIn PDF document text
- http://biccairo.com/images/how-to-get-a-free-2021-roblox-account.pdfIn PDF document text
- http://j-cook.pro/images/roblox-cheat-engine-bypass-roblox.pdfIn PDF document text
- http://www.evaplast.by/images/how-to-get-free-hair-with-no-robux-works.pdfIn PDF document text
- https://cintasoeste.com.ar/images/cheats-for-roblox-running-simulator-2.pdfIn PDF document text
- http://sbm-nn.ru/images/free-gear-in-roblox-2021.pdfIn PDF document text
- http://only1you.ru/images/roblox-reeden-code-free.pdfIn PDF document text
- http://www.gongoff.com/images/how-to-get-free-robux-no-download-no-survey-2021.pdfIn PDF document text
- http://www.ntc.edu.za/images/hacked-my-instagram-roblox-id.pdfIn PDF document text
- http://www.drent.se/images/tumbnails-roblox-free.pdfIn PDF document text
- https://belixconstructions.com.au/images/antivirus-free-exploits-for-roblox.pdfIn PDF document text
- http://force-seniorklub.dk/images/roblox-get-free-robux-obby.pdfIn PDF document text
- https://cdu-lengerich.de/images/robux-hack-xyz.pdfIn PDF document text
- https://gestionpatrimonial.net/images/easy-basic-hacking-engine-for-roblox.pdfIn PDF document text
- http://msfs-eastafrica.com/images/roblox-free-download-apk-uptodown.pdfIn PDF document text
- http://lichtdrukkerijwijchen.nl/images/cheat-code-roblox-dbz.pdfIn PDF document text
- http://www.art-concept.gr/images/gravity-hack-roblox.pdfIn PDF document text
- https://www.arquetopia.org/images/free-gift-card-roblox-codes-2021-list.pdfIn PDF document text
- https://www.prodex-holz.cz/images/how-to-get-free-robux-on-ipad-2021.pdfIn PDF document text
- https://www.wildpark-johannismuehle.de/images/roblox-hack-tools-in-the-game-no-mega-android-tutorial.pdfIn PDF document text
- http://eddegrootassurantien.nl/images/free-robux-just-1-step-by-step.pdfIn PDF document text
+17 more URL(s)
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
stream_003_off00008138.bin |
decompressed-pdf-stream | PDF FlateDecoded stream at offset 0x8138 | 25120 bytes |
SHA-256: a5accffa4794872a3f09ad44b56650d54f0097e8ed13239be29e055bad59673a |
|||
font_01_sfnt_off0000bbba.bin |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xBBBA | 18080 bytes |
SHA-256: 7d0da021587325b246f0539c59d42d389f8641449b380667a10fdd59b87ea58f |
|||
Open this report in the interactive analyzer, or submit your own file for analysis.