MALICIOUS
62
Risk Score
Malware Insights
MITRE ATT&CK
T1204 Malicious File
The PDF file was detected as Win.Trojan.MSShellcode-7 by ClamAV, indicating malicious intent. The PDF contains only image data and no readable text, suggesting it's designed to bypass simple content analysis or to present a visual lure. No scripts or further exploitable content were extracted.
Machine Learning
- Nyx PDF Classifier clean score 0.0247
Heuristics 2
-
ClamAV: Win.Trojan.MSShellcode-7 critical CLAMAV_DETECTIONClamAV detected this file as malware: Win.Trojan.MSShellcode-7
-
PDF paints image(s) but contains no text operators info PDF_IMAGE_ONLY_LUREPDF has 1 image XObject(s) and the content stream contains no text-emitting operators (BT/ET, Tj, TJ, ', ") in either raw bytes or decompressed streams — this is the screenshot-as-PDF pattern used to bypass text-based scanners and to deliver instructions purely through rendered pixels. It is informational unless paired with invisible links or risky URI context.
Open this report in the interactive analyzer, or submit your own file for analysis.