Extracted

• • Target

    da1a528cf5e82cd4c1ba6b48a1ea3468_JaffaCakes118

  • Size

    74KB

  • MD5

    da1a528cf5e82cd4c1ba6b48a1ea3468

  • SHA1

    998f61de008968c34acbfaf4f95e81d7c938cf7e

  • SHA256

    18a6526484e5033509f6fefbba3439f48ef0be087c696f210f349f6a90924616

  • SHA512

    9caabf922b45059807346214c6b3b5451c78727a02064190d971e605cd9b5e3528e9b13f0c70419d52988adaa9a0d5316e472c0bd964b2fb771c0f6f0eebb277

  • SSDEEP

    768:FtVucRFoqkp59YBvLdTv9ReVi4eFov5UHRFBd8LTTnLlCiJRz9wORjKkh58/460B:Ftocn1kp59gxBK85fBCLTbJCNw6Z+a96

  Score

  10^/10

  discoveryexecution

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Command and Scripting Interpreter: PowerShell

    Using powershell.exe command.

    execution
  behavioral1behavioral2