Extracted

• • Target
    jaffacakes118_ddb80566a26593df8c0ba4a3ada8ce29d71432f3c3b30192d1f3a664b602bdc2.bin
  • Size 6.8MB
  • SHA256 ddb80566a26593df8c0ba4a3ada8ce29d71432f3c3b30192d1f3a664b602bdc2
  • MD5 7f027ec9efab378a6c6943dc68d0c5ea
  • SHA1 a490cab04e24ba22de185e2c7226f2adc6d8db3d
  • SHA512 e059371d9c73565adbece31561bd31d9b2ea84f3be20667fbc9406139b18d0ef9e3f0d9988a9a12adbfe8f2d4c4ca6fa8005209942532e37b282eaf20c3998e4
  • SSDEEP 3072:1NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNk:G
  • TLSH
    T1086612A2177745629228306F5F1C0D6D6F6705BF5EA331343AF84FE8A7429A843BF942
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  execution

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Command and Scripting Interpreter: PowerShell

    Run Powershell and hide display window.

    execution
  behavioral1behavioral2