General
- Target jaffacakes118_ARMA II Reinforcements-SKIDROW.exe
- Size 10.8MB
- Sample260910-eq3nzsxbpc
- SHA256 76d3e8b2e8ec818ccda53be00045ffc11af47d2c5cc66dadb209fdb3239cafb2
- MD5 22cd7cc366624657b45a58940fd50242
- SHA1 e103f9bfdc279018ecad35659b9a5dfb946f10c1
- SHA512 820f0dec7378273bc72743a69d68116693abfbd7358b88cb4a73d5d040ad008cae15a9368cd8a09ea0c5de4cdc22d3a3e53a960e29d687ff90a7969d081b52c8
- SSDEEP 1536:PYFpEddxllL+RMeLgXWXPLJizHVv/7cORCchyQTTwIvT2c3AQ:PYFpixDL+RHgG/LAzl/QRcpTMDc3T
- TLSH T145B6D00DAAC91A26E8EE077CECDF5341C376D8029913DB4F4EFC48096A5B7B28615787
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_ARMA II Reinforcements-SKIDROW.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_ARMA II Reinforcements-SKIDROW.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_ARMA II Reinforcements-SKIDROW.exe
- Size 10.8MB
- SHA256 76d3e8b2e8ec818ccda53be00045ffc11af47d2c5cc66dadb209fdb3239cafb2
- MD5 22cd7cc366624657b45a58940fd50242
- SHA1 e103f9bfdc279018ecad35659b9a5dfb946f10c1
- SHA512 820f0dec7378273bc72743a69d68116693abfbd7358b88cb4a73d5d040ad008cae15a9368cd8a09ea0c5de4cdc22d3a3e53a960e29d687ff90a7969d081b52c8
- SSDEEP 1536:PYFpEddxllL+RMeLgXWXPLJizHVv/7cORCchyQTTwIvT2c3AQ:PYFpixDL+RHgG/LAzl/QRcpTMDc3T
- TLSH T145B6D00DAAC91A26E8EE077CECDF5341C376D8029913DB4F4EFC48096A5B7B28615787
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory