General
- Target jaffacakes118_Metro_Last_Light_v1.0.0.5_Incl_Faction_Pack_DLC-FLTDOX.exe
- Size 461KB
- Sample260910-em4f4syzcw
- SHA256 00b3b73de994f04b39bb4124e304e7bf45719df5c20065ba4707b9f54a18f9bc
- MD5 88f79e52812716f1ea2804fda698c249
- SHA1 40dc47270e8d387a22eaec78c07e7b462f560de0
- SHA512 938cf175bf10d39d1a7a4871f36e47dad2dc258353f9b8706f1d5445d1917b0cbda85aa255a538a81990e87d8f1e52e479f24fd9a4da8750c23b40669a4ce680
- SSDEEP 6144:OEMwOaTJhiiMhXIci478AaJT5bcIqqDLuIuQ:Ona1hiiMh4ci4wLZ5bsqnu5Q
- TLSH T118A49D37F2C18C73D3711B3C8C66E6D8561ABA2D2F3824377DE81F4C9A391526929297
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Metro_Last_Light_v1.0.0.5_Incl_Faction_Pack_DLC-FLTDOX.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Metro_Last_Light_v1.0.0.5_Incl_Faction_Pack_DLC-FLTDOX.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Metro_Last_Light_v1.0.0.5_Incl_Faction_Pack_DLC-FLTDOX.exe
- Size 461KB
- SHA256 00b3b73de994f04b39bb4124e304e7bf45719df5c20065ba4707b9f54a18f9bc
- MD5 88f79e52812716f1ea2804fda698c249
- SHA1 40dc47270e8d387a22eaec78c07e7b462f560de0
- SHA512 938cf175bf10d39d1a7a4871f36e47dad2dc258353f9b8706f1d5445d1917b0cbda85aa255a538a81990e87d8f1e52e479f24fd9a4da8750c23b40669a4ce680
- SSDEEP 6144:OEMwOaTJhiiMhXIci478AaJT5bcIqqDLuIuQ:Ona1hiiMh4ci4wLZ5bsqnu5Q
- TLSH T118A49D37F2C18C73D3711B3C8C66E6D8561ABA2D2F3824377DE81F4C9A391526929297
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.