Extracted

• • Target

    e213dbdba251983a9b283727c9077459_JaffaCakes118

  • Size

    265KB

  • MD5

    e213dbdba251983a9b283727c9077459

  • SHA1

    82947d27d6d47769e929cf258714e8d49b82c386

  • SHA256

    897cfde213f675672f4b6f60bfbecfed5bbe1d7500ce68253ae5a54b76c13ce4

  • SHA512

    a863f694dff81c2777a59669f8c3704cc154cb23d44afb9fa14c09c060ca6eeadb4360497b5d9a5ead29c7a2631e50f10b821be8b2b3e7ec69aa981ccb6ce379

  • SSDEEP

    6144:wCwQK3RpVS7G4SVuz1QzLhxztsZGPwu41:yQQLGSVuz1QHhxztCu4

  Score

  10^/10

  discoveryexecution

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Command and Scripting Interpreter: PowerShell

    Using powershell.exe command.

    execution
  behavioral1behavioral2