MALICIOUS
130
Risk Score
Malware Insights
MITRE ATT&CK
T1203 Exploitation for Client Execution
The file is a PDF document flagged by multiple detection engines, including ClamAV, as malicious. Static analysis identified a launch action, indicating an attempt to exploit a vulnerability within the PDF reader to execute code. The ML classifier also strongly indicated maliciousness.
Machine Learning
- Nyx PDF Classifier malicious score 0.9994
Heuristics 2
-
ClamAV: Win.Exploit.Fnstenv_mov-1 critical CLAMAV_DETECTIONClamAV detected this file as malware: Win.Exploit.Fnstenv_mov-1
-
Launch action high PDF_LAUNCHPDF contains a /Launch action with an unresolved or extension-less target — treat as potentially dangerous
Open this report in the interactive analyzer, or submit your own file for analysis.