General
- Target SAMP_Addon_2.8.exe
- Size 95.8MB
- Sample260809-vy4h9asfkf
- SHA256 9f72ce426ae65174bf43d1dbc83a77cf73921c82275ff7c9f99bb4e823eca085
- MD5 3369f788f9129a2782337d1eace97a58
- SHA1 ba4a533adc1dfde31952829746f5571a4e8d9843
- SHA512 8ae0c1fb7949baab6e9fcc5da548945cc442bf917322ad25fecbd3c16bf71d32aeb3dd33fb9f450c9f4ea0a3a21bd8b82b40a4c042257f0336b3a21b4c3be6bd
- SSDEEP 1572864:fvLzv29GgV482qDgt1Y17ZZqHNaNfF/G0M+oZAzGjaQb3MlbE3SilQnpHkqpwjHv:f/v29r482qDl174aNlG0VzGWQDd3VqpS
- TLSH T1EC2833B6320218AAE2078375F016CC3153653FCD467F9370A9E57C17F6B9EE25DAA10A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Behavioral task
behavioral1
Sample
SAMP_Addon_2.8.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target SAMP_Addon_2.8.exe
- Size 95.8MB
- SHA256 9f72ce426ae65174bf43d1dbc83a77cf73921c82275ff7c9f99bb4e823eca085
- MD5 3369f788f9129a2782337d1eace97a58
- SHA1 ba4a533adc1dfde31952829746f5571a4e8d9843
- SHA512 8ae0c1fb7949baab6e9fcc5da548945cc442bf917322ad25fecbd3c16bf71d32aeb3dd33fb9f450c9f4ea0a3a21bd8b82b40a4c042257f0336b3a21b4c3be6bd
- SSDEEP 1572864:fvLzv29GgV482qDgt1Y17ZZqHNaNfF/G0M+oZAzGjaQb3MlbE3SilQnpHkqpwjHv:f/v29r482qDl174aNlG0VzGWQDd3VqpS
- TLSH T1EC2833B6320218AAE2078375F016CC3153653FCD467F9370A9E57C17F6B9EE25DAA10A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.