Extracted

• • Target
    jaffacakes118_71cf780adb9c8582c50076529e0194bd50db68d0994da008d4548ff0375e007b.bin
  • Size 6.4MB
  • SHA256 71cf780adb9c8582c50076529e0194bd50db68d0994da008d4548ff0375e007b
  • MD5 fb836ee5f3549be23d8c378605dfc369
  • SHA1 d8943761fbbb441fea3fdb79424d0bfe419cfc48
  • SHA512 d51aff6edb424e25b0486c8a591561a5e9f7d5c0393bad1744f6455574e2194ffb182ca576d131de10e554df5086b6c0d5b9259cd9cddd0a3dda9d79505c9ad6
  • SSDEEP 96:SBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBI:bwd08Z4
  • TLSH
    T1F666129212B876FEAE9107419F886CECD41E554FA88F4C4DFC80ABD4EE58FF1244746A
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  execution

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Command and Scripting Interpreter: PowerShell

    Run Powershell and hide display window.

    execution
  behavioral1behavioral2