Extracted

• • Target

    5cfd75dcd91d9d1a0aa33557b5ad4241_JaffaCakes118

  • Size

    242KB

  • MD5

    5cfd75dcd91d9d1a0aa33557b5ad4241

  • SHA1

    dcd9507be9bc5030ed9559e98b7dcf8f9ded6a08

  • SHA256

    81914767a7650f3fb662df4da7d27100f40a2467208426cfc15b4134847e9e5e

  • SHA512

    08bbf4d07fd7f1062b9d9f89ba06baba247d384dd111fdefa3002587ec9ac545f10257c6b775bf26dd37347cd4474b9d8c3505603289e4a92a33e10dcf035cfc

  • SSDEEP

    3072:XYy0u8YGgjv+ZvchmkHcI/o1/Vb6///////////////////////////////////s:Z0uXnWFchmmcI/o1/HHB

  Score

  10^/10

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Blocklisted process makes network request

  • Drops file in System32 directory

  behavioral1behavioral2