PDF malware analysis — malicious · dc2f4289f6de341d

MALICIOUS

PDF

1.2 KB

MD5: 024e9368f6d541a8e6d37135742794c1 SHA-1: 75acf2dbd668102279ec8ed90e28f8809c01ef82 SHA-256: dc2f4289f6de341d384c6522a27358fd6f015a3b76a9c0885e4f7145a35f891f

106 Risk Score

Malware Insights

MITRE ATT&CK

T1204 Malicious Link T1059.001 PowerShell

The file is identified as a malicious PDF by ClamAV and an ML classifier. Heuristics indicate the presence of embedded JavaScript, suggesting an attempt to exploit vulnerabilities and execute malicious code. The specific ClamAV detection name 'Pdf.Exploit.Agent-36388' points to a known exploit pattern.

Machine Learning

Nyx PDF Classifier malicious score 1.0000

Heuristics 3

ClamAV: Pdf.Exploit.Agent-36388 critical CLAMAV_DETECTION

ClamAV detected this file as malware: Pdf.Exploit.Agent-36388
JavaScript action low PDF_JAVASCRIPT

PDF contains a /JavaScript action. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
Embedded JS stream low PDF_JS

PDF references a /JS stream. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.

Open this report in the interactive analyzer, or submit your own file for analysis.