Extracted

• • Target

    eebab40d2b32d50ddb36e3027f5d271d_JaffaCakes118

  • Size

    156KB

  • MD5

    eebab40d2b32d50ddb36e3027f5d271d

  • SHA1

    9332211794dad4cb7dd0134813257c48ff9d5e37

  • SHA256

    46b505ec3ab5e99510427ccb7e0658520124ad02797627777babb13d78defa75

  • SHA512

    dd4147a75532c936b49d2f39540eb32fb6a027e92d0fb8f1c070223c4797eb0f4f1a0644a54c45ff087b24104dd778ad7576ba0d4ba04aa3dd30d800f8119b2d

  • SSDEEP

    1536:IA3Aerdi1Ir77zOH98Wj2gpngB+a932eRz/C3Q:prfrzOH98ipgrV63Q

  Score

  10^/10

  discovery

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Blocklisted process makes network request

  • Drops file in System32 directory

  behavioral1behavioral2