MALICIOUS
98
Risk Score
Malware Insights
MITRE ATT&CK
T1203 Exploitation for Client Execution
The sample is a PDF file flagged by multiple detection engines, including ClamAV, as a malicious exploit. The presence of XFA form elements suggests a potential attack vector targeting form processing within the PDF reader. The ML classifier also strongly indicates maliciousness.
Machine Learning
- Nyx PDF Classifier malicious score 0.9958
Heuristics 2
-
ClamAV: Pdf.Exploit.Agent-36928 critical CLAMAV_DETECTIONClamAV detected this file as malware: Pdf.Exploit.Agent-36928
-
XFA form low PDF_XFAPDF uses XML Forms Architecture — can contain script logic
Open this report in the interactive analyzer, or submit your own file for analysis.