Pdf.Dropper.Agent-7288694-0 — PDF malware analysis

Static analysis result for SHA-256 a1ca47d3e12929f4…

MALICIOUS

PDF

2.6 KB
MD5: 7edc569cc3fd79be94f31020a83cf907 SHA-1: 6d7f1e5a7dc09863c07347d01a312d7579534db6 SHA-256: a1ca47d3e12929f4e089416f161d155ddbacd1d80decabd565e91ce031db66f1
76 Risk Score

Malware Insights

Pdf.Dropper.Agent-7288694-0 · confidence 95%

MITRE ATT&CK
T1204 Malicious File T1204.002 Malicious File: User Execution

The file is identified as a malicious PDF by ClamAV, specifically 'Pdf.Dropper.Agent-7288694-0'. Static analysis revealed embedded JavaScript actions and streams within the PDF structure, indicating its role as a dropper. The presence of these elements strongly suggests the PDF is intended to execute a secondary, malicious payload upon opening.

Heuristics 3

  • ClamAV: Pdf.Dropper.Agent-7288694-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Pdf.Dropper.Agent-7288694-0
  • JavaScript action low PDF_JAVASCRIPT
    PDF contains a /JavaScript action. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
  • Embedded JS stream low PDF_JS
    PDF references a /JS stream. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.

Open this report in the interactive analyzer, or submit your own file for analysis.