Extracted

• • Target

    6543c25fb6d40bd6c96501081586df71_JaffaCakes118

  • Size

    155KB

  • MD5

    6543c25fb6d40bd6c96501081586df71

  • SHA1

    34e93e41c8a325264cb68d3655cf3622ba78ce13

  • SHA256

    202e67f5278001d2497ccc4e4373ed5ead47be61e4df1b98b05edf9e88b4abcb

  • SHA512

    029e4bc551dc31afc63a9dbf0431ad1cd155735823ffb1b6d502922aad1fa4297bf5df32202be66adc4422dc01b10f89f60ce60aac366b0e1bec267b36e901a6

  • SSDEEP

    1536:uA903A90nrdi1Ir77zOH98Wj2gpngB+a90G38o8kwPniDKT+0AIdq8xwUr:urfrzOH98ipgoQ8jBniDK7FdBxwUr

  Score

  10^/10

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Blocklisted process makes network request

  • Drops file in System32 directory

  behavioral1behavioral2