Extracted

• • Target

    c86945492c2577ada97ae6c9e8d2b1a5_JaffaCakes118

  • Size

    132KB

  • MD5

    c86945492c2577ada97ae6c9e8d2b1a5

  • SHA1

    2415fca1c76bb5ee38ffec70178cd9bc38c511a3

  • SHA256

    1c97235809cb8431eccb5413864eb8a08ec66dd0fc8d9a12cd8d8da9f8c9d40c

  • SHA512

    3ffdc3f009e2413684534f86ca32196f29503705901a7b90499b6ff3507ba71ff2123ed6727cf51c033c39a561472475f52bf838c3ab4df8746748f8de8e37ef

  • SSDEEP

    1536:LA2RD3bNqfNpu39IId5a6XP3Mg8afSqNVyzwyQUpsJNw:VR1qf69xak3MgxSwEzwyQisJNw

  Score

  10^/10

  discovery

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Blocklisted process makes network request

  • Drops file in System32 directory

  behavioral1behavioral2