MALICIOUS
68
Risk Score
Malware Insights
MITRE ATT&CK
T1204.002 Malicious File
The critical ClamAV heuristic identified this PDF as Pdf.Exploit.Agent-36928, indicating it exploits known vulnerabilities. The presence of an XFA form further supports its exploitability. While no specific payload or delivery mechanism is detailed in the extracted evidence, the file's nature as a malicious PDF points towards an attack pattern aimed at exploiting user interaction or document parsing vulnerabilities.
Heuristics 2
-
ClamAV: Pdf.Exploit.Agent-36928 critical CLAMAV_DETECTIONClamAV detected this file as malware: Pdf.Exploit.Agent-36928
-
XFA form low PDF_XFAPDF uses XML Forms Architecture — can contain script logic
Open this report in the interactive analyzer, or submit your own file for analysis.