PDF malware analysis — malicious · d9acf31a007e8260

MALICIOUS

PDF

27.2 KB

MD5: d6dfc981f8aae6e63facfa389448c8e6 SHA-1: 5c50afb98e0504d042333738bfa71c0436f9855e SHA-256: d9acf31a007e826039319e35535a1a0f3dffc059cb910df371fc82005e4af377

106 Risk Score

Malware Insights

MITRE ATT&CK

T1204.002 Malicious File: Malicious File

The PDF file was flagged by multiple heuristics, including a high-severity ML classifier and ClamAV detection for obfuscated objects. The presence of embedded JavaScript actions and streams indicates an attempt to execute malicious code upon opening the document, likely to download and run a secondary payload.

Machine Learning

Nyx PDF Classifier malicious score 0.9998

Heuristics 3

ClamAV: Heuristics.PDF.ObfuscatedNameObject critical CLAMAV_DETECTION

ClamAV detected this file as malware: Heuristics.PDF.ObfuscatedNameObject
JavaScript action low PDF_JAVASCRIPT

PDF contains a /JavaScript action. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
Embedded JS stream low PDF_JS

PDF references a /JS stream. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.

Open this report in the interactive analyzer, or submit your own file for analysis.