Extracted

• • Target

    6200332e69c1324e80fc9a4aaf521f8f0379cdf22474d40d0638b1b5c51a4218

  • Size

    157KB

  • MD5

    312422566739d3acd0cadc060cbca25e

  • SHA1

    241ced8ff7c4a1b402dea766d764ac7e76e02d67

  • SHA256

    6200332e69c1324e80fc9a4aaf521f8f0379cdf22474d40d0638b1b5c51a4218

  • SHA512

    869c0968dbcb552167a36efd44ac3c39a668259f8cf73bf7c425f9bc0163be40a8f02d5f7ff57ae4a214e9b14993503c3d49013d8f05189c6148c76d2946d88a

  Score

  10^/10

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Blocklisted process makes network request

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1