Analysis

  • max time kernel
    141s
  • max time network
    109s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02-06-2024 20:37

General

  • Target

    samp.exe

  • Size

    402KB

  • MD5

    47262ff31e2ba60753a48ae67c2c7278

  • SHA1

    3a2506a6125f9d7ddfa476ed8bee48e9d3376595

  • SHA256

    f190d296525c0d297385539df047cb542ccac4b77976f62082e03210eeee3d6f

  • SHA512

    bbfc5988dd09966f8e1b1fb5c41ef6ef318a13c7d57ecc48eb2d67d55edd68f4ab8f220c19465c5607318359b68854f89c684ade0ae480c9b80c2c6c3eaf1e62

  • SSDEEP

    12288:VgAPaNGsKk6DE10sT3WkgL2TTrXYv3tw:Ok5DEKa3RNTTrXYvd

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\samp.exe
    "C:\Users\Admin\AppData\Local\Temp\samp.exe"
    1⤵
    • Modifies registry class
    PID:4724

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4724-0-0x0000000000400000-0x0000000000524000-memory.dmp

    Filesize

    1.1MB

  • memory/4724-1-0x00000000024F0000-0x00000000024F1000-memory.dmp

    Filesize

    4KB

  • memory/4724-2-0x0000000000400000-0x0000000000524000-memory.dmp

    Filesize

    1.1MB

  • memory/4724-4-0x00000000024F0000-0x00000000024F1000-memory.dmp

    Filesize

    4KB