MALICIOUS
80
Risk Score
Malware Insights
MITRE ATT&CK
T1204 Malicious Link
T1204.002 Malicious Link: Malicious File
The PDF file contains embedded launch actions that trigger the execution of the calculator application (calc.exe on Windows, Calculator.app on Mac, or xcalc on Linux). The document body explicitly details how different PDF viewers might handle this, ranging from immediate execution to user prompts. This indicates a social engineering attempt to bypass user caution by launching a seemingly harmless application, potentially as a precursor to more malicious activity.
Heuristics 2
-
OpenAction trigger high PDF_OPENACTIONPDF has an /OpenAction that launches, submits, or opens an external target
-
Launch action high PDF_LAUNCHPDF contains a /Launch action with an unresolved or extension-less target — treat as potentially dangerous
Open this report in the interactive analyzer, or submit your own file for analysis.