Extracted

• • Target

    241c8670af21b0f0a22294f37551b274_JaffaCakes118

  • Size

    157KB

  • MD5

    241c8670af21b0f0a22294f37551b274

  • SHA1

    dfa2591f70ba8abc7aeaaab046f02822aa343c9e

  • SHA256

    950aab35cd6a9abb8a91721df60a55f6f86d854774735384e574cd3a6339c42f

  • SHA512

    93224f9de33fa2dc9e6ba658d366bb8d44c1e3643a99e54ed943c8d6ad64f09d40a94a2bd07f504b4bab7be9880b4c61c67919d74acb0eef7de8926031fd2c29

  • SSDEEP

    1536:vToTVrdi1Ir77zOH98Wj2gpngd+a9ZTgwQx5EvGtarWfjPYKwAL+wT+lQ:CrfrzOH98ipgbwT+lQ

  Score

  10^/10

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Blocklisted process makes network request

  • Process spawned suspicious child process

    This child process is typically not spawned unless (for example) the parent process crashes. This typically indicates the parent process was unsuccessfully compromised.

  • Drops file in System32 directory

  behavioral1behavioral2