MALICIOUS
76
Risk Score
Malware Insights
MITRE ATT&CK
T1566.002 Spearphishing Attachment
T1204.002 Malicious File
The file is a PDF document identified as malicious by ClamAV due to obfuscated object names, suggesting an attempt to evade detection. The presence of XFA forms and an embedded file further indicates a malicious structure, likely intended to exploit a PDF vulnerability for payload delivery. No specific IOCs were extracted, and the document body was unreadable.
Heuristics 3
-
ClamAV: Heuristics.PDF.ObfuscatedNameObject critical CLAMAV_DETECTIONClamAV detected this file as malware: Heuristics.PDF.ObfuscatedNameObject
-
Embedded file low PDF_EMBEDDEDPDF embeds a file attachment — could carry an executable or another weaponised document as a nested payload
-
XFA form low PDF_XFAPDF uses XML Forms Architecture — can contain script logic
Open this report in the interactive analyzer, or submit your own file for analysis.