General
- Target jaffacakes118_Sniper Ghost Warrior 2 (Complete Edition) (2013).exe
- Size 575KB
- Sample260910-cwv5zsef86
- SHA256 5260143670d6de1583ed0d8bde0d481250deac7bbb85510730c18b7052af8f5e
- MD5 7170763951a2e38c1a1c3b549b1176d9
- SHA1 529a1ea588417553ed17a0ef6e7d6f0565dd5f91
- SHA512 5a990f0cfa0dec10edeaba0fd6a27d246cfd0b9b49b66caa74777cc02165d45e8e536390777cac798dddd2a2f92a75bae5ca687ef0aede8b36edefb9842c3b28
- SSDEEP 6144:OEMwOaTJhiiMhXIci478AaJT5bcIqqDLuIub:Ona1hiiMh4ci4wLZ5bsqnu5b
- TLSH T104C49D37F2C18C73D3711B3C8C66E6D8561ABA2D2F3824377DE81F4C9A391526929297
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Sniper Ghost Warrior 2 (Complete Edition) (2013).exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Sniper Ghost Warrior 2 (Complete Edition) (2013).exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Sniper Ghost Warrior 2 (Complete Edition) (2013).exe
- Size 575KB
- SHA256 5260143670d6de1583ed0d8bde0d481250deac7bbb85510730c18b7052af8f5e
- MD5 7170763951a2e38c1a1c3b549b1176d9
- SHA1 529a1ea588417553ed17a0ef6e7d6f0565dd5f91
- SHA512 5a990f0cfa0dec10edeaba0fd6a27d246cfd0b9b49b66caa74777cc02165d45e8e536390777cac798dddd2a2f92a75bae5ca687ef0aede8b36edefb9842c3b28
- SSDEEP 6144:OEMwOaTJhiiMhXIci478AaJT5bcIqqDLuIub:Ona1hiiMh4ci4wLZ5bsqnu5b
- TLSH T104C49D37F2C18C73D3711B3C8C66E6D8561ABA2D2F3824377DE81F4C9A391526929297
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.