Extracted

• • Target

    ecd96bcfbfd4cf575a8720d72957a998_JaffaCakes118

  • Size

    240KB

  • MD5

    ecd96bcfbfd4cf575a8720d72957a998

  • SHA1

    0cbbf0fa4dff29209e586e9af524668b94ba6f1e

  • SHA256

    e484e9b8614dff68bd63e103a395b4e03576c2f72fdcba1ff45344012e0f51b6

  • SHA512

    ba9379f229a86f3cd69a3e96d43028e7d8589f3071a2d776b2aed284fa7ac5b6b089502833bd0d3d6429882253f53ec4c32c9cf0f6c5cf3ccf7f25f03af6419f

  • SSDEEP

    3072:0j6yw1MgpQiBhGWb6esLbTh8YuyDRBFtdfGkRReZjBu7DgqwXE:0HgtEWPsL/aTyT9GkRRep1qw0

  Score

  10^/10

  discovery

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Blocklisted process makes network request

  • Drops file in System32 directory

  behavioral1behavioral2