Extracted

• • Target
    givenbestthingswithbetterplacesinotknowbetter.hta
  • Size 433KB
  • SHA256 dea4019c4594da7d1a5d7f594b465c710ca0745305f27c31d3addc891373bf22
  • MD5 96842c8dfe8924436d10be6301f4368f
  • SHA1 0669fbd37463f07b8aed05249b1607fafea1e2d2
  • SHA512 5a6f7283a7001a5bd57c3c98deee705ebafdfde65b995c860a9073b948985dfdd9097b5bd2441b162f750241b66673138316d68df3f527d0e6bd6e7b2e626dc3
  • SSDEEP 768:uB0B0B0B0B0B0B0B0B0B0B0B0B0B0B0B0B0B0B0B0B0B0B0B0B0B0B0B0B0B0B0H:A0WA7n
  • TLSH
    T1CC941B2E469E4D75B4E0A3DB78D3353EFE88048B6536494EF98885DE211901AB3F09FD
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoveryexecution

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Command and Scripting Interpreter: PowerShell

    Run Powershell and hide display window.

    execution
  behavioral1behavioral2