MALICIOUS
100
Risk Score
Malware Insights
MITRE ATT&CK
T1204.002 Malicious File
T1566.002 Spearphishing Attachment
The PDF file contains a launch action that attempts to execute a file named 'tro.exe'. The document body text, while containing offensive language, reinforces the presence of 'tro.exe' as a target. This indicates a direct attempt to deliver and execute a malicious payload.
Heuristics 2
-
Launch action critical PDF_LAUNCHPDF contains a /Launch action whose target is an executable, URL, or UNC path — can start an external application
-
/Launch action target: tro.exe high PDF_LAUNCH_COMMANDPDF /Launch action specifies an executable target with parameters '\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n������Ŷ��\nfuck you!\n'.
Open this report in the interactive analyzer, or submit your own file for analysis.