Overview

overview

8

Static

static

8

6f3090cf5f...18.pdf

windows7-x64

8

6f3090cf5f...18.pdf

windows10-2004-x64

1

1.xlsx

windows7-x64

1

1.xlsx

windows10-2004-x64

1

GYTKPVM.docm

windows7-x64

4

GYTKPVM.docm

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    6f3090cf5fb621de204659b57a69c257_JaffaCakes118
  • Size 60KB
  • Sample240524-vebdcsce6y
  • SHA256 0a326eb9a416f039be104bb5f199b7f3442515f88bd5c7ad1492b1721c174b8e
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10
pdfjavascriptmacro

Malware Config

Signatures

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

    macro
  • PDF contains JavaScript

    Detects presence of JavaScript in PDF files.

    pdfjavascript
  • PDF contains one or more embedded files

    Detects presence of embedded files in PDF files.

    pdf

File Explorer

  • 6f3090cf5fb621de204659b57a69c257_JaffaCakes118
    .pdf 60KB
  • 1.xlsx
    .xlsx 7KB
  • GYTKPVM.docm
    .docm 61KB
  • GYTKPVM.zip
    .zip 116B
  • GYTKPVM_1.txt
    38B

6f3090cf5fb621de204659b57a69c257_JaffaCakes118

  • SHA256 0a326eb9a416f039be104bb5f199b7f3442515f88bd5c7ad1492b1721c174b8e
  • MD5 SHA1 SHA512 SSDEEP