Extracted

• • Target

    690561df86e4ee7cb5a048fb1d680c5b_JaffaCakes118

  • Size

    201KB

  • MD5

    690561df86e4ee7cb5a048fb1d680c5b

  • SHA1

    5cc43634a5c614eac6f46f1eb2b5034541045a8f

  • SHA256

    98632e96b70d38ce6029a1216a0bac4b571db57e8cdc5c727fcbb67eb88cc439

  • SHA512

    7355a9e12ffcf95121c62524fc1eefb2475fca98d574899f6032e392e52183467dc1b633245223dad064b87b766e854c1a841edd54c3df44f5df4f8497887d54

  • SSDEEP

    1536:44tcTv8kvjEuJ0dH5L0c4vs3ti18NmIIP4ovlnoR+a9ssfxO5dq78ct2PU7MXKSd:44tcTvjvTY140818tIP4ovpcGqfsJj

  Score

  10^/10

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Blocklisted process makes network request

  • Drops file in System32 directory

  behavioral1behavioral2