Extracted

• • Target

    1880d13fa02bef8f17371845e0fe89cc_JaffaCakes118

  • Size

    93KB

  • MD5

    1880d13fa02bef8f17371845e0fe89cc

  • SHA1

    5804bbdae06f7bd57f6711c5ab3adf124fac62af

  • SHA256

    be849032d67a24eda952c62593d2c6d991500c0a8e628fd189fa9ca51a221cdb

  • SHA512

    599ede07c5c416d7b4d285aa5ee30356d4fbd88411a7d39354413d5cfd3bebc4c798c786cf6dceab7a27cef1824809c78a54882e9d5d3a03cf0bf6892f207cea

  • SSDEEP

    1536:focn1kp59gxBK85fBlHF5qFycNGrFMMzV/+a9:A41k/W483lWycNGzV

  Score

  10^/10

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Blocklisted process makes network request

  • An obfuscated cmd.exe command-line is typically used to evade detection.

  behavioral1behavioral2