Malicious PDF — malware analysis report

Static analysis result for SHA-256 bbd60c3c3ee806f7…

MALICIOUS

PDF

9.2 KB
MD5: 3aa3980c4a78840551f176beb421a400 SHA-1: d1da1318a0aab6667cdfd8473fd69637cdbe5bd6 SHA-256: bbd60c3c3ee806f771b52aa1664c132e1561efdd5c6864962e1925b111d194b0
68 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious File

The PDF file was detected as malicious by ClamAV with a critical heuristic for obfuscated name objects. Additionally, a PDF embedded file heuristic fired, indicating the potential for a secondary stage. The document body content is heavily obfuscated and unreadable, further suggesting malicious intent. The combination of these factors points to a likely exploit delivery mechanism.

Heuristics 2

  • ClamAV: Heuristics.PDF.ObfuscatedNameObject critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Heuristics.PDF.ObfuscatedNameObject
  • Embedded file low PDF_EMBEDDED
    PDF embeds a file attachment — could carry an executable or another weaponised document as a nested payload