Overview

overview

7

Static

static

5

sa-mp-0.3....ll.exe

windows10-2004-x64

3

sa-mp-0.3....ll.exe

windows11-ltsc_2024-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows11-ltsc_2024-x64

3

$SYSDIR/d3dx9_25.dll

windows10-2004-x64

3

$SYSDIR/d3dx9_25.dll

windows11-ltsc_2024-x64

3

SAMPUninstall.exe

windows10-2004-x64

7

SAMPUninstall.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows11-ltsc_2024-x64

3

bass.dll

windows10-2004-x64

3

bass.dll

windows11-ltsc_2024-x64

3

rcon.exe

windows10-2004-x64

3

rcon.exe

windows11-ltsc_2024-x64

3

samp.dll

windows10-2004-x64

3

samp.dll

windows11-ltsc_2024-x64

3

samp.exe

windows10-2004-x64

5

samp.exe

windows11-ltsc_2024-x64

5

samp_debug.exe

windows10-2004-x64

3

samp_debug.exe

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    sa-mp-0.3.7-R5-1-install.exe
  • Size 14.8MB
  • Sample260729-s97nyaah67
  • SHA256 550321da5b10c472bc719bca2c0df74b240f80eff828079eb5253598fe112ae3
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discoveryinstallerupx

Malware Config

Targets

    • Target
      sa-mp-0.3.7-R5-1-install.exe
    • Size 14.8MB
    • SHA256 550321da5b10c472bc719bca2c0df74b240f80eff828079eb5253598fe112ae3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral1behavioral2
    • Target
      $PLUGINSDIR/InstallOptions.dll
    • Size 14KB
    • SHA256 c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral3behavioral4
    • Target
      $SYSDIR/d3dx9_25.dll
    • Size 2.2MB
    • SHA256 4c54df27ce84d21b2924e64ff79b13e7876ce85d8e0c9c1d0abd8da73888187a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral5behavioral6
    • Target
      SAMPUninstall.exe
    • Size 56KB
    • SHA256 d00f8bf2eaa1994b0064d7b14fc987b0aab9b3c440a4177257ee2d3217fe6d3b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discoveryinstaller

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral7behavioral8
    • Target
      $PLUGINSDIR/InstallOptions.dll
    • Size 14KB
    • SHA256 c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral10behavioral9
    • Target
      bass.dll
    • Size 90KB
    • SHA256 3f04620d6627abe5c3b4747faf26603ab7a006c81b2021ab4689bdd7033bb4cd
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral11behavioral12
    • Target
      rcon.exe
    • Size 36KB
    • SHA256 19f0d6d844f6f14856e3ea88853202b6310edc4726eb0c803710b67f641e596f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral13behavioral14
    • Target
      samp.dll
    • Size 1.1MB
    • SHA256 b72b5dbe725f81864ca3f78bc7063bda56cc05fc7188af822fa7a754432553a2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral15behavioral16
    • Target
      samp.exe
    • Size 403KB
    • SHA256 910227f4b451e3ecd1e0c8565fb2951e1f34164c2f441c6f384ee343b414a1b4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral17behavioral18
    • Target
      samp_debug.exe
    • Size 144KB
    • SHA256 f64d11680442cea5940614177b5ecff866e1e45c07a95cd5564327a94e8101d3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral19behavioral20

MITRE ATT&CK Enterprise v16

Tasks