Extracted

• • Target

    22bf933c54470cf9f6536052a23058df_JaffaCakes118

  • Size

    459KB

  • MD5

    22bf933c54470cf9f6536052a23058df

  • SHA1

    7779e99adf4d2627b2e441e64048cc0a7be2a73a

  • SHA256

    93d436758cc24dfad3d575c3794ccbed12ff44d6d9f0d76bc428c470d5b89608

  • SHA512

    0dc6af9e1632af7cb6d53e5b1e7632f7fd51d40005a46305a194cfd15cbd0e5126def07e4eacc507ed8324fd4c3af4a6d65a5c3afd5029af4d9a2e84e6a9a1ba

  • SSDEEP

    6144:4igvdMekCZ84iPG25djmMzSVIhl9EKRDqME4yanMjdn/NQVg+D3Do8oRtxQwvVA7:Dgv76BPl5Vm8SVIf51E4K14o8Iu7

  Score

  10^/10

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Blocklisted process makes network request

  • Drops file in System32 directory

  behavioral1behavioral2