Extracted

• • Target

    ef0ec452cdc0556580baec01de9e5508_JaffaCakes118

  • Size

    158KB

  • MD5

    ef0ec452cdc0556580baec01de9e5508

  • SHA1

    f3a1cfa22928d1f6afd42c3353e500e0f98fce35

  • SHA256

    2544f7f03bcb606491b39f0f8cba55899e5e9dd8871128a268329dd6a539f5bf

  • SHA512

    14a3da19f9c3a4c37b60360db46f281aaa5ccab4fd2ac575d8212df0a35054c55971fc702b7b6d742205b4febedd288882e9e02ff14719b91bd4de515b361054

  • SSDEEP

    1536:+iaqasrdi1Ir77zOH98Wj2gpngx+a9OxRiqLE8ct2PU7eXKSSxH5ppJx2FWL:+0rfrzOH98ipgukJx2FWL

  Score

  10^/10

  discovery

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Blocklisted process makes network request

  • Drops file in System32 directory

  behavioral1behavioral2