PDF malware analysis — malicious · 46eaa155dcac1c23

MALICIOUS

PDF

602 B

MD5: 97a0385b245ca2f8dc6cfb98076c8ca4 SHA-1: 6b31400b799daa1d81b648221f6235ee12231a55 SHA-256: 46eaa155dcac1c23a5e081f37addcd765e3d189a8961230295a0236aa1a893c3

66 Risk Score

Malware Insights

MITRE ATT&CK

T1204.002 Malicious File: Malicious JavaScript

The PDF contains embedded JavaScript and uses ASCIIHexDecode filters, indicating an attempt to obfuscate malicious code. The ML classifier strongly flags this PDF as malicious. The presence of JavaScript suggests an attempt to exploit vulnerabilities within the PDF reader or download a secondary payload.

Machine Learning

Nyx PDF Classifier malicious score 1.0000

Heuristics 3

ASCIIHexDecode filter (with exploit indicators) medium PDF_FILTER_HEX

Hex-encoding filter present alongside exploit delivery indicators — often used to hide payload or shellcode bytes
JavaScript action low PDF_JAVASCRIPT

PDF contains a /JavaScript action. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
Embedded JS stream low PDF_JS

PDF references a /JS stream. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.

Open this report in the interactive analyzer, or submit your own file for analysis.