Script / .PDF malware analysis — malicious · 4a406f66c5a39028

MALICIOUS

Script / .PDF

212 B

MD5: c316ba2ab5a4fa378d38892153609953 SHA-1: 25ffc8c5d39d6fd051338778c427ff4a1e9343e8 SHA-256: 4a406f66c5a39028ab3617baa65f07d46ff7e0531b9d7446fd0aa69bb271898f

80 Risk Score

Malware Insights

MITRE ATT&CK

T1059.003 Windows Command Shell

The file was identified as a Windows Script Host file masquerading as a document. This indicates an attempt to trick the user or system into executing a script. The script's primary function is likely to execute arbitrary code when run by WScript or CScript.

Heuristics 2

Reference to Windows Script Host high SC_STR_WSCRIPT

Reference to Windows Script Host
Windows Script Host content masquerading as document high SCRIPT_WSH_MASQUERADE

File content references WScript/CScript even though it was routed as a document upload. Windows Script Host files can execute code directly when opened on Windows.

Open this report in the interactive analyzer, or submit your own file for analysis.