Extracted

• • Target

    ee76588e535fa4aabf271ebd14709bd8_JaffaCakes118

  • Size

    186KB

  • MD5

    ee76588e535fa4aabf271ebd14709bd8

  • SHA1

    9f499153156a08875e5d5f1451fb2d2c59fae337

  • SHA256

    92004fdfd845395f59b03e025722db7fbe54c0425e07e389df08769dc0b7a695

  • SHA512

    e79a8e62079af94e287444ad6dc5415212abf0b2e0a7fd4b98fa7ca9a017f9a4a4642d6444ea0c3f0ee214d1e0aeb1d055ba0b6de7682acc6ffe7609a9d18051

  • SSDEEP

    1536:qI491Y2wcI491Y2w+4tcTv8kvjEuJ0dH5L0c4vs3ti18NmIIP4ovlnoR+a9fXlje:A4tcTvjvTY140818tIP4ovpC1jnNPE

  Score

  10^/10

  discovery

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Blocklisted process makes network request

  • Process spawned suspicious child process

    This child process is typically not spawned unless (for example) the parent process crashes. This typically indicates the parent process was unsuccessfully compromised.

  • Drops file in System32 directory

  behavioral1behavioral2