Extracted

• • Target

    00b6f32541b2effa646262654a91205e_JaffaCakes118

  • Size

    187KB

  • MD5

    00b6f32541b2effa646262654a91205e

  • SHA1

    05a5b929f07fcbb06048de8d8b160a82066949ab

  • SHA256

    7a8024cf777ab45c5c969c5efff3dd4f289bc22baf1c91bd884fc2d29435c884

  • SHA512

    cfe1d3a24567220bdc075e95f109345ae98dabd17dbf0dfb28826e58ded9175ab5774653692352ed3749b0d551a2c04a77975a7f367671e8192c0c3b09995383

  • SSDEEP

    1536:RGGGGGGGGGG2xJLEt+LaaGGGGGGGGGGjLo9xilATmd8YkYeT/EA8sap8cjufajn7:vrfrzOH98ipgRh59YZ

  Score

  10^/10

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Blocklisted process makes network request

  • Drops file in System32 directory

  behavioral1behavioral2