Pdf.Dropper.Agent — PDF malware analysis

Static analysis result for SHA-256 c28ecb723d8f8d16…

MALICIOUS

PDF

226.8 KB
MD5: c18e7404087425791a8e9fc2d2d887d5 SHA-1: 63b5d3a11209fe6e0ad17f91d46e4ac3a3c2429f SHA-256: c28ecb723d8f8d1641dae0f6fcdf922c80ca57d87d6a855c542ab5c8d516b8e6
90 Risk Score

Malware Insights

Pdf.Dropper.Agent · confidence 95%

MITRE ATT&CK
T1204 Malicious Link T1059 Command and Scripting Interpreter

The file was detected by ClamAV as Pdf.Dropper.Agent-7217703-0, and a machine learning classifier also flagged it as malicious with high confidence. The document body contains generic text suggesting it is a lure. The primary function appears to be dropping a malicious payload.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9956

Heuristics 1

  • ClamAV: Pdf.Dropper.Agent-7217703-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Pdf.Dropper.Agent-7217703-0