Malicious PDF — malware analysis report

Static analysis result for SHA-256 8f84d2e4e21e20b6…

MALICIOUS

PDF

636 B
MD5: cd4216afd568561cf44df94f18c608ff SHA-1: 309a483c544d541dc90b621c306a6ae9d46ac01c SHA-256: 8f84d2e4e21e20b6cf33c7ada726d50690bbab7d36070b29c6131261b61f09a3
76 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell

The PDF file contains embedded JavaScript, indicated by the PDF_JAVASCRIPT and PDF_JS heuristics. ClamAV also flagged this as Heuristics.PDF.ObfuscatedNameObject, suggesting malicious intent. The embedded JavaScript is likely designed to execute malicious code, potentially downloading a second-stage payload.

Heuristics 3

  • ClamAV: Heuristics.PDF.ObfuscatedNameObject critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Heuristics.PDF.ObfuscatedNameObject
  • JavaScript action low PDF_JAVASCRIPT
    PDF contains a /JavaScript action. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
  • Embedded JS stream low PDF_JS
    PDF references a /JS stream. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.

Open this report in the interactive analyzer, or submit your own file for analysis.