MALICIOUS
138
Risk Score
Malware Insights
MITRE ATT&CK
T1204.002 Malicious File
The PDF contains a launch action that attempts to execute an external file named 'csqzai03.pdf'. This is a common technique for delivering secondary payloads or initiating exploits. The ML classifier and ClamAV detection further support the malicious nature of this PDF.
Machine Learning
- Nyx PDF Classifier malicious score 0.5518
Heuristics 3
-
ClamAV: Pdf.Exploit.Agent-21848 critical CLAMAV_DETECTIONClamAV detected this file as malware: Pdf.Exploit.Agent-21848
-
/Launch action target: csqzai03.pdf high PDF_LAUNCH_COMMANDPDF /Launch action specifies an executable target.
-
Launch action low PDF_LAUNCHPDF contains a /Launch action; all filespec targets are document files (cross-PDF navigation pattern, common in multi-part document bundles)
Open this report in the interactive analyzer, or submit your own file for analysis.