Extracted

• • Target
    10454198bdde3683cf82398fc703ac8e_JaffaCakes118
  • Size 69KB
  • SHA256 584e410d67d4ff1612ae6e84cf83c7a35164e1cf2e9e14b49546df1f4ed7affa
  • MD5 10454198bdde3683cf82398fc703ac8e
  • SHA1 f89bd6e7c202c0b005242dc80a4872d16f09e567
  • SHA512 b9989c8d859cb78671ac4d2f5f65033857167388a87f8f0a62cb9bb7df0d3d794fa29d6b8fa88c987ba0e0c161d054f6fed3bf8fedd0f2c961ffe5b0be255f5e
  • SSDEEP 1536:MptJlmrJpmxlRw99NBs+aOSSgT9f1gE2Z:Mte2dw99fi99
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Blocklisted process makes network request

  • An obfuscated cmd.exe command-line is typically used to evade detection.

  behavioral1behavioral2