MALICIOUS
80
Risk Score
Malware Insights
MITRE ATT&CK
T1204.002 Malicious File
The PDF file contains a launch action that attempts to execute calc.exe. This is a common technique used to bypass security controls and download or execute a second-stage payload. The confidence is high due to the direct execution attempt.
Heuristics 2
-
Launch action high PDF_LAUNCHPDF contains a /Launch action with an unresolved or extension-less target — treat as potentially dangerous
-
/Launch action target: "calc.exe" high PDF_LAUNCH_COMMANDPDF /Launch action specifies an executable target.
Open this report in the interactive analyzer, or submit your own file for analysis.