Malicious PDF / .TXT — malware analysis report

Static analysis result for SHA-256 a98ed387955c9f94…

MALICIOUS

PDF / .TXT

5.7 KB
MD5: 6ccafd2922c8a6dcfcb830b610db1708 SHA-1: 7e5faca9eff174762b3d7798bc063320d5cf21fe SHA-256: a98ed387955c9f94a89538f3653decc96481986c72da8bda7a420850cb03b39e
76 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell

The PDF file contains embedded JavaScript, indicated by the PDF_JAVASCRIPT and PDF_JS heuristics. This embedded script is likely designed to download and execute a malicious payload. ClamAV also flagged the file as Heuristics.PDF.ObfuscatedNameObject, further supporting its malicious nature. No specific family could be identified, and no IOCs were directly extractable from the provided evidence.

Heuristics 3

  • ClamAV: Heuristics.PDF.ObfuscatedNameObject critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Heuristics.PDF.ObfuscatedNameObject
  • JavaScript action low PDF_JAVASCRIPT
    PDF contains a /JavaScript action. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
  • Embedded JS stream low PDF_JS
    PDF references a /JS stream. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.

Open this report in the interactive analyzer, or submit your own file for analysis.