Extracted

• • Target

    7174dd8241866bc3129dd4a12d65a4fe_JaffaCakes118

  • Size

    242KB

  • MD5

    7174dd8241866bc3129dd4a12d65a4fe

  • SHA1

    0307d85c4735983210cd8aa787ebedab1eb3f41f

  • SHA256

    ec6e5e90018ed9ec8f99993e3b41f1e5b44d77032f3da8c9348579cba788ea5b

  • SHA512

    dfe919235ad309ca08814c189f6adcbf458158663ac637872cd4d37fb7f52094be0ebe22842b35c8c17ac3eda33f0d87d93c93da9b17f33ba23869b239c51805

  • SSDEEP

    3072:wYy0u8YGgjv+ZvchmkHcI/o1/Vb6///////////////////////////////////C:40uXnWFchmmcI/o1/LOfSR

  Score

  10^/10

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Blocklisted process makes network request

  • Drops file in System32 directory

  behavioral1behavioral2