Extracted

• • Target
    jaffacakes118_6fe1cab4b6d2ebc6ed84710494b10efe07cfd3a77ad66e7088c7dc04163acd48.bin
  • Size 6.3MB
  • SHA256 6fe1cab4b6d2ebc6ed84710494b10efe07cfd3a77ad66e7088c7dc04163acd48
  • MD5 d540cf7c0bc160d1e945262ac11fc50b
  • SHA1 b346ab0c611abc10bf620de815c6a9c2179d7cb1
  • SHA512 866b7d6f78dbefc13b76f651b2eb4ed5de0c0314f7d5295ab137207011888276297af281f7919b0d4e0cd1bb772983949e8c6687ad22fcb269531a3e9bd15a73
  • SSDEEP 384:d0awFtI3J8liL+t9rntjB+akAUtDlBBFuF9Jd9t:OFWE9Jd9t
  • TLSH
    T15D6612D03F9541A884B7ADF09EA271C2A14C00CFEA3721DDFC2A256BB718651777EDA1
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  execution

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Command and Scripting Interpreter: PowerShell

    Run Powershell and hide display window.

    execution
  behavioral1behavioral2