MALICIOUS
68
Risk Score
Malware Insights
MITRE ATT&CK
T1204.002 Malicious File
The critical ClamAV heuristic firing indicates the PDF is recognized as a known exploit, specifically 'Pdf.Exploit.Agent-36962'. The presence of XFA form elements further suggests a potential vector for exploit execution. While no specific payload or delivery URL was extracted, the file's nature as a malicious PDF exploit is clear.
Heuristics 2
-
ClamAV: Pdf.Exploit.Agent-36962 critical CLAMAV_DETECTIONClamAV detected this file as malware: Pdf.Exploit.Agent-36962
-
XFA form low PDF_XFAPDF uses XML Forms Architecture — can contain script logic
Open this report in the interactive analyzer, or submit your own file for analysis.