Pdf.Dropper.Agent-7596606-0 — PDF malware analysis

Static analysis result for SHA-256 3db23279c50c6592…

MALICIOUS

PDF

5.8 KB
MD5: 83aa56203a96a10f2601c65e2efff02f SHA-1: 47ed1fb7e70f5e6af0f1f690187141b9bcd3881b SHA-256: 3db23279c50c65921dd8e2b6640e8396fddf43f538c966af3a3e42dd2b8979fb
76 Risk Score

Malware Insights

Pdf.Dropper.Agent-7596606-0 · confidence 95%

MITRE ATT&CK
T1204.002 Malicious File Execution: Malicious JavaScript

The PDF file contains embedded JavaScript, indicated by the PDF_JAVASCRIPT and PDF_JS heuristics. ClamAV identified this file as Pdf.Dropper.Agent-7596606-0, suggesting it acts as a dropper for other malicious content. The embedded JavaScript is likely responsible for downloading and executing a second-stage payload.

Heuristics 3

  • ClamAV: Pdf.Dropper.Agent-7596606-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Pdf.Dropper.Agent-7596606-0
  • JavaScript action low PDF_JAVASCRIPT
    PDF contains a /JavaScript action. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
  • Embedded JS stream low PDF_JS
    PDF references a /JS stream. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.

Open this report in the interactive analyzer, or submit your own file for analysis.