Extracted

• • Target
    jaffacakes118_bcbc411963e4fef6cd8702d56dda1403f46d922e36c4b357aabc478a83a5e944.bin
  • Size 6.5MB
  • SHA256 bcbc411963e4fef6cd8702d56dda1403f46d922e36c4b357aabc478a83a5e944
  • MD5 b0c70b10cf00eceddf2d8b7bcbd8345a
  • SHA1 81ac40ec54e46e13fa85fb26e0f951e05c7d20f1
  • SHA512 0908f092232069b52fb01adbe4a46425c24421b85e58610c70d401e1d06c88433270427d42f4dd345d87df2ede498a8a39e69dc611aff1784d6b98c4ca322cf7
  • SSDEEP 192:m6YYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYM:m30
  • TLSH
    T1F36612A94549499086281343EE63E8E276BFC11F48010E69FD39C9ADBFFF27E15DB508
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  execution

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Command and Scripting Interpreter: PowerShell

    Run Powershell and hide display window.

    execution
  behavioral1behavioral2