Malicious PDF — malware analysis report

Static analysis result for SHA-256 567dcb786e4e156e…

MALICIOUS

PDF

2.4 KB
MD5: 84fb08f10a8b2c40f60e7886e020cd3f SHA-1: 4f5f420859e02ace281dcbc2768100e1beedaa9f SHA-256: 567dcb786e4e156ea71b16ddd23eb4cd18dfe27bb92f2fe3b2d50ff88210e105
76 Risk Score

Malware Insights

The PDF file contains embedded JavaScript, indicated by the PDF_JAVASCRIPT and PDF_JS heuristics. ClamAV detection as Pdf.Exploit.Agent-35551 further confirms its malicious nature. The embedded JavaScript is likely responsible for exploiting a PDF vulnerability to execute arbitrary code.

Heuristics 3

  • ClamAV: Pdf.Exploit.Agent-35551 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Pdf.Exploit.Agent-35551
  • JavaScript action low PDF_JAVASCRIPT
    PDF contains a /JavaScript action. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
  • Embedded JS stream low PDF_JS
    PDF references a /JS stream. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.

Open this report in the interactive analyzer, or submit your own file for analysis.