Extracted

• • Target

    64739782f3b4859b8cc263ca95a7be7b_JaffaCakes118

  • Size

    232KB

  • MD5

    64739782f3b4859b8cc263ca95a7be7b

  • SHA1

    b69937d7ed6b15f13041c9be8925528cda1de8df

  • SHA256

    057b65e168e48816b40f82608d05cc5034e7daeacab139c778498e83d0bd5107

  • SHA512

    ea0283883ef081b028cf7918493978eb64c57f76a16ed86d4051b2087008f1170d283e3790ca533612bfea8a391cfeda913a3a617b2e25affd3a54c02f2ffadf

  • SSDEEP

    3072:CnpUePf2QjHfe5ejL/xSu90OoiLuDKZXfwKeljR1v:eCTIHfe5kxUOmD+XfwLb

  Score

  10^/10

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Blocklisted process makes network request

  • An obfuscated cmd.exe command-line is typically used to evade detection.

  behavioral1behavioral2