MALICIOUS
100
Risk Score
Malware Insights
MITRE ATT&CK
T1204.002 Malicious File
T1059.003 Windows Command Shell
The PDF file contains a launch action that attempts to execute a file named 'line1 cmdd1234567890a1234567890b1234567890c1234567890d1234567890f.exe'. This executable is likely a second-stage payload. The document body contains the same filename, reinforcing the intent to trick the user into executing it.
Heuristics 2
-
Launch action critical PDF_LAUNCHPDF contains a /Launch action whose target is an executable, URL, or UNC path — can start an external application
-
/Launch action target: line1 cmdd1234567890a1234567890b1234567890c1234567890d1234567890f.exe high PDF_LAUNCH_COMMANDPDF /Launch action specifies an executable target.
Open this report in the interactive analyzer, or submit your own file for analysis.