Extracted

• • Target
    enhansewelotforthe.hta
  • Size 980KB
  • SHA256 3325db3b0a332dc85e8df184d37c33c43ce66406814278508313c636668c0020
  • MD5 b6a19849018d568e9d9a07366ab7de85
  • SHA1 3a7de137d1093beed7a5527b8a02cb02a42b07e4
  • SHA512 0ec77e109824c2c86c168a03225fb638b06ea753a63fe524efc93e173d5f05d01a774bb998c028d22261ddec37d74d7254cf8770a2d87a14c1835f087f68479f
  • SSDEEP 3072:iwycA7IE0SK5bfflT7IE0S5doT664Pv4V3h5xoA7JIe8iGJdbZOOZ77IE0SY:M7Irtt7Ird67Irp
  • TLSH
    T14325FC653AB3C80A5233FB4C6A199B01CBE1D65D92C0891BF35F96E0C7DFA99C389354
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoveryexecution

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Command and Scripting Interpreter: PowerShell

    Using powershell.exe command.

    execution
  behavioral1behavioral2