Extracted

• • Target
    goodpeoplesaroundonmewhobestfor.hta
  • Size 26KB
  • SHA256 aae6749bc704c3280611d740454fb4cd94c3930a900d692a73f2c871d59d9818
  • MD5 43d929d6c59f775e303fd0b0f6c8f283
  • SHA1 bec29fd5e6ad296057d986ecf993c8881402dbf1
  • SHA512 f700c10d2e969fb6c6b72e8c6a588998815a7fd53c830ac7d3b0eeafd610176e59cf50d5f1242b07d4a68f1b2ba596b4db272dab173dfe96fe40b307f8d8528e
  • SSDEEP 192:bdod1dod1dod1dod1dod1dod1dod1dod1dod1dod1dod1dod1dod1dod1dod1doW:67+SGm
  • TLSH
    T173C2D4AF17E204799849EF931C14E11DDAFD5089282FF32DF264A0E2DB1AB2F5921D35
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoveryexecution

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Command and Scripting Interpreter: PowerShell

    Run Powershell and hide display window.

    execution
  behavioral1behavioral2