Extracted

• • Target

    66522b920389fcb6d7ddf8808ba0a8ac_JaffaCakes118

  • Size

    173KB

  • MD5

    66522b920389fcb6d7ddf8808ba0a8ac

  • SHA1

    f6dfa3ecc41e60d3672a66ea98e15ffb40ffbe64

  • SHA256

    6c15840ece51c9fef3afe93b089baaeb15b75128797ebd2bed4e8bd1f8c091a6

  • SHA512

    410dffc84077ba97781cff7de5418faa0c42825e9b3f606932af70a88afbcfc24f8e3ba13b8e43df7c4488e3d572ae1074893d88bc9161a194e8bbb5de6f7e5a

  • SSDEEP

    3072:g77HUUUUUUUUUUUUUUUUUUUTkOQePu5U8qxTkKJLHwVEjx5g8:g77HUUUUUUUUUUUUUUUUUUUT52VWTkKN

  Score

  10^/10

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Blocklisted process makes network request

  • Drops file in System32 directory

  behavioral1behavioral2