Malicious PDF — malware analysis report

Static analysis result for SHA-256 9390681c86393907…

MALICIOUS

PDF

993 B
MD5: 915744f7835f1bdd26802e20adc98dff SHA-1: f13990ed9c76eb06043a171f1fc15544c9237eb5 SHA-256: 9390681c86393907491ab447d181ba24e935e6bc525b0a81debd24f860c1f602
100 Risk Score

Malware Insights

MITRE ATT&CK
T1204.002 Malicious File: User Execution: Malicious Link

The PDF file contains a launch action that directs the user to open the URL www.google.com. This is a common technique used to redirect users to malicious websites or initiate downloads. The heuristic firings confirm the presence of a PDF launch action targeting an external URL.

Heuristics 2

  • Launch action critical PDF_LAUNCH
    PDF contains a /Launch action whose target is an executable, URL, or UNC path — can start an external application
  • /Launch action target: www.google.com high PDF_LAUNCH_COMMAND
    PDF /Launch action specifies an executable target.