Extracted

• • Target

    37976bb880912c145743405126acdeef_JaffaCakes118

  • Size

    186KB

  • MD5

    37976bb880912c145743405126acdeef

  • SHA1

    feabb04a90b8dd28ced94cfbe93c60463b88f7dd

  • SHA256

    acaac70278d981fdd3e5245f869808ac9b929266ef262303d76bece1fc19a24b

  • SHA512

    2422bd1ff502c0d2be82114532dfb19204f976c0c9c705b9d411153344d7effdc05fc0421339112d72491339e1e940982219c608b5c5b9ee7fa2209aad186744

  • SSDEEP

    1536:qI491Y2wcI491Y2w+4tcTv8kvjEuJ0dH5L0c4vs3ti18NmIIP4ovlnoR+a9HXljc:A4tcTvjvTY140818tIP4ovpW1jnnPk

  Score

  10^/10

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Blocklisted process makes network request

  • Process spawned suspicious child process

    This child process is typically not spawned unless (for example) the parent process crashes. This typically indicates the parent process was unsuccessfully compromised.

  • Drops file in System32 directory

  behavioral1behavioral2