MALICIOUS
100
Risk Score
Malware Insights
MITRE ATT&CK
T1204.002 Malicious File
The PDF contains a launch action that attempts to execute the local program 'notepad.exe'. The document body includes text that prompts the user to click 'Open' to view confidential data, suggesting a social engineering lure to execute the embedded action. The confidence is high due to the direct heuristic firing on the launch action.
Heuristics 2
-
Launch action critical PDF_LAUNCHPDF contains a /Launch action whose target is an executable, URL, or UNC path — can start an external application
-
/Launch action target: notepad.exe high PDF_LAUNCH_COMMANDPDF /Launch action specifies an executable target.
Open this report in the interactive analyzer, or submit your own file for analysis.