MALICIOUS
110
Risk Score
Malware Insights
MITRE ATT&CK
T1204.002 Malicious File
The PDF contains a launch action that directly executes the 'cmd' executable. This is a common technique used to initiate further malicious activity, such as downloading and executing a second-stage payload. The ML classifier also strongly indicated maliciousness.
Machine Learning
- Nyx PDF Classifier malicious score 0.9999
Heuristics 2
-
Launch action high PDF_LAUNCHPDF contains a /Launch action with an unresolved or extension-less target — treat as potentially dangerous
-
/Launch action target: cmd high PDF_LAUNCH_COMMANDPDF /Launch action specifies an executable target.
Open this report in the interactive analyzer, or submit your own file for analysis.