General
- Target jaffacakes118_Resident.Evil.6.Update.5-RELOADED.exe
- Size 674KB
- Sample260910-dy3hhswbjc
- SHA256 635aa8afdcecb7ec19ea88bb0e0876aa330d8ca0bb6c785a976be74df8369ff9
- MD5 c2233809f2f09581f18b54127218c0a9
- SHA1 6f4a99ac77e52b74479a6b950dc003fdfb14f221
- SHA512 5bad0150901f3dcb370042ee9017f347a15aa0775709505673b33264f670c58d1dc21fdf302a2b2d5d8ef6f4e06893a97c4d7168d25b6a9376954c824c08ba98
- SSDEEP 6144:OEMwOaTJhiiMhXIci478AaJT5bcIqqDLuIui:Ona1hiiMh4ci4wLZ5bsqnu5i
- TLSH T16EE49D37F2C18C73D3711B3C8C66E6D8561ABA2D2F3824377DE81F4C9A391526929297
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Resident.Evil.6.Update.5-RELOADED.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Resident.Evil.6.Update.5-RELOADED.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Resident.Evil.6.Update.5-RELOADED.exe
- Size 674KB
- SHA256 635aa8afdcecb7ec19ea88bb0e0876aa330d8ca0bb6c785a976be74df8369ff9
- MD5 c2233809f2f09581f18b54127218c0a9
- SHA1 6f4a99ac77e52b74479a6b950dc003fdfb14f221
- SHA512 5bad0150901f3dcb370042ee9017f347a15aa0775709505673b33264f670c58d1dc21fdf302a2b2d5d8ef6f4e06893a97c4d7168d25b6a9376954c824c08ba98
- SSDEEP 6144:OEMwOaTJhiiMhXIci478AaJT5bcIqqDLuIui:Ona1hiiMh4ci4wLZ5bsqnu5i
- TLSH T16EE49D37F2C18C73D3711B3C8C66E6D8561ABA2D2F3824377DE81F4C9A391526929297
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.