Extracted

• • Target
    jaffacakes118_22447f91c0165b67f22570672cc7814becdd0a89e82ba48e039df13b7f1874f8.bin
  • Size 6.2MB
  • SHA256 22447f91c0165b67f22570672cc7814becdd0a89e82ba48e039df13b7f1874f8
  • MD5 fcfaf8028875edb28e8e1b4061a7725b
  • SHA1 128e7add94d95380b2dd3b71581815c412c44166
  • SHA512 96bc21e36880fcf0f280e7b0624dfdc18a5383a7e58a3dc9b97b4686cdf3b64c11ec7f7458f97a407e3a920f2649b9bf61231d36c6e0f7eee0f073d2c375d7c3
  • SSDEEP 192:Kyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyi:j
  • TLSH
    T19B6601C022C9D01CDE6E32692E717ED8BEA54C2259793BD938A14FE87FA46C09D35D34
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  execution

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Command and Scripting Interpreter: PowerShell

    Run Powershell and hide display window.

    execution
  behavioral1behavioral2