Overview
overview
5Static
static
5sa-mp serv...ce.exe
windows10-2004-x64
3sa-mp serv...ce.exe
windows11-ltsc_2024-x64
3sa-mp serv...se.vbs
windows10-2004-x64
5sa-mp serv...se.vbs
windows11-ltsc_2024-x64
5sa-mp serv...ip.vbs
windows10-2004-x64
5sa-mp serv...ip.vbs
windows11-ltsc_2024-x64
5sa-mp serv...as.vbs
windows10-2004-x64
5sa-mp serv...as.vbs
windows11-ltsc_2024-x64
5sa-mp serv...el.vbs
windows10-2004-x64
5sa-mp serv...el.vbs
windows11-ltsc_2024-x64
5sa-mp serv...ug.vbs
windows10-2004-x64
5sa-mp serv...ug.vbs
windows11-ltsc_2024-x64
5sa-mp serv...rn.vbs
windows10-2004-x64
5sa-mp serv...rn.vbs
windows11-ltsc_2024-x64
5sa-mp serv...s1.vbs
windows10-2004-x64
5sa-mp serv...s1.vbs
windows11-ltsc_2024-x64
5sa-mp serv...de.vbs
windows10-2004-x64
5sa-mp serv...de.vbs
windows11-ltsc_2024-x64
5sa-mp serv...or.vbs
windows10-2004-x64
5sa-mp serv...or.vbs
windows11-ltsc_2024-x64
5sa-mp serv...ll.vbs
windows10-2004-x64
5sa-mp serv...ll.vbs
windows11-ltsc_2024-x64
5sa-mp serv...ls.vbs
windows10-2004-x64
5sa-mp serv...ls.vbs
windows11-ltsc_2024-x64
5sa-mp serv...go.vbs
windows10-2004-x64
5sa-mp serv...go.vbs
windows11-ltsc_2024-x64
5sa-mp serv...er.vbs
windows10-2004-x64
5sa-mp serv...er.vbs
windows11-ltsc_2024-x64
5sa-mp serv...ip.vbs
windows10-2004-x64
5sa-mp serv...ip.vbs
windows11-ltsc_2024-x64
5sa-mp serv...ed.vbs
windows10-2004-x64
5sa-mp serv...ed.vbs
windows11-ltsc_2024-x64
5General
- Target 5b5e4d8ceeb36f09e50a4f50d4131ca39143d8b0e40f846c7c26d724ed79cde7
- Size 2.0MB
- Sample261002-2g4agsvarh
- SHA256 5b5e4d8ceeb36f09e50a4f50d4131ca39143d8b0e40f846c7c26d724ed79cde7
- MD5 d099d66233de1dfeb6b6f8e5e0cc247b
- SHA1 d56a5d8871db77cb38b06c75be806582c85cfa40
- SHA512 ccf40322f846a60114a0251cecc950861fe1bd2b0daf72737345a38a1cab5cb8ca6b83508f71bea259f7838bb7d5a32708d454df5ad4b00e61ad63adcfec705c
- SSDEEP 49152:c8B6g1cTpAhpNw9y1f6UtqLkwsDxdyTLlupIaFU7Z9r5Df9:Vt1cTpAbK9y1dQLkRdynlaFUDpf9
- TLSH T1B0A52322CC2D54EBC1AAA37B9243D2417B7A83582061B1368B7D721708C6DF8777739E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
sa-mp server/announce.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
sa-mp server/announce.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
sa-mp server/filterscripts/a51_base.vbs
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
sa-mp server/filterscripts/a51_base.vbs
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
sa-mp server/filterscripts/cargoship.vbs
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
sa-mp server/filterscripts/cargoship.vbs
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
sa-mp server/filterscripts/dillimore_gas.vbs
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
sa-mp server/filterscripts/dillimore_gas.vbs
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
sa-mp server/filterscripts/ferriswheel.vbs
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
sa-mp server/filterscripts/ferriswheel.vbs
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
sa-mp server/filterscripts/fsdebug.vbs
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
sa-mp server/filterscripts/fsdebug.vbs
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
sa-mp server/filterscripts/kylies_barn.vbs
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
sa-mp server/filterscripts/kylies_barn.vbs
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
sa-mp server/filterscripts/ls_apartments1.vbs
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
sa-mp server/filterscripts/ls_apartments1.vbs
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
sa-mp server/filterscripts/ls_beachside.vbs
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
sa-mp server/filterscripts/ls_beachside.vbs
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
sa-mp server/filterscripts/ls_elevator.vbs
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
sa-mp server/filterscripts/ls_elevator.vbs
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
sa-mp server/filterscripts/ls_mall.vbs
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
sa-mp server/filterscripts/ls_mall.vbs
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
sa-mp server/filterscripts/ls_prisonwalls.vbs
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
sa-mp server/filterscripts/ls_prisonwalls.vbs
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
sa-mp server/filterscripts/ls_wellsfargo.vbs
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
sa-mp server/filterscripts/ls_wellsfargo.vbs
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
sa-mp server/filterscripts/ospawner.vbs
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
sa-mp server/filterscripts/ospawner.vbs
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
sa-mp server/filterscripts/pirateship.vbs
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
sa-mp server/filterscripts/pirateship.vbs
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
sa-mp server/filterscripts/safe_animated.vbs
Resource
win10v2004-20260911-en
Behavioral task
behavioral32
Sample
sa-mp server/filterscripts/safe_animated.vbs
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target sa-mp server/announce.exe
- Size 40KB
- SHA256 2a0270ee3766ff09dfcb2aa70316c4076c6c713154784c9b324509d66c019a26
- MD5 b4fcc1c57c10b87427fa1ae3e02b70c6
- SHA1 46f4c41bf2f6aa2e7e9871e733f632b4aa73213b
- SHA512 f769a656a69ab6b5ba2313c60949aaaedc33a4934b821102a584d85942d096267cb01abc8b0f1abd898c5b5f2d199559c669df4f430e93a42bb47a92ac4626e9
- SSDEEP 384:VzIa1qY2wCLK5LkyAZAhmjaJ5iXwCI6RUbiBkOTeZpPxyjO9viZAeouqEolmoLJ9:ya1qGZIyiZjaflAkOCpwjWviZKB7JD6
- TLSH T1E0039D137DD181B3D8D6D6F041AA8F86A73B650807B181D39FA45D4EBF227D0AE3A306
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target sa-mp server/filterscripts/a51_base.pwn
- Size 14KB
- SHA256 fd3d2544184277e39eb34b62197745bff6724789a0db612468bd3ee344bbfe1e
- MD5 ef0c54aa3df6892cfe37a3cfaa5d4017
- SHA1 83b2a8e59ed673279c56403a6a8fb508287faac4
- SHA512 56b3a73821ba87aeae41976969345a71ad1d7f370cfd23c13dbc8a57e391bd287afcdf0c48a0139ca8e8d97ec052aaa12cffda48fd724b4c133d4403348e657a
- SSDEEP 384:0AKIAwrp667MLQtqVDcRf3fRMxMh+ObgdwLPb73S713L7JQN7QV:0AKILrp66MLQtqVDzxMRbgdwLP/3y13X
- TLSH T1B26222516E0A86B66C33D30507B56A53EBB451170378E3A6F9CEE34C7F36844827CAA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Executes a VBScript file via the Windows Script Host.
-
- Target sa-mp server/filterscripts/cargoship.pwn
- Size 6KB
- SHA256 154561cde86e3ed4b1ab572ab208e4a808f0cf5abbecfd861ff83d180346e6ff
- MD5 c4727f3d4070b55ab8501a45f2d29b1d
- SHA1 70416d9bc02b12b9347b046cf397d9fb4a23b95c
- SHA512 69a1423cc08b042574ec796d89b6e93dc40cfd7c2f6c172aa66971de249f2fcfd3bcbcbf5957301d9364473b8efc489c780b1fcf0dca7ff84becac6e80e12bb5
- SSDEEP 96:yV8U6Rnb2v9jtO1WoXQt6ml/CfJwukmZBmrXwTaZPF3MT3d:M8U4b8PO/I6BkmujwTaZPxMbd
- TLSH T1B8E152E65FE7C0826B2BFACD73B04107E61B8B3C58D2A294399DC0CC97290145E7DB86
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Executes a VBScript file via the Windows Script Host.
-
- Target sa-mp server/filterscripts/dillimore_gas.pwn
- Size 5KB
- SHA256 50ec84777c8e71c3d61dbedc285d9b2a2beecb4e2d89919820bcc62d39854f4e
- MD5 f3defd470beaefac01ea5027aca20a12
- SHA1 fc8d9aa43e905aeb17e75b753704242c566c50a4
- SHA512 448b559c21a87f9dc7136f8a9cfff82abab2ecc9398391c2f178f955b73217c042afd590a5f4b215eb5661b5b8c61498768108e76af1dc57201ab6060352d742
- SSDEEP 48:0oJ/1D2dlOcJSWgoZFf6CDC7jmyygBSpBkkLvpBnKIdObnTRhNiuwHpb8112d+En:00Ny7O9WgovfM7SpcCBKRf/t0aQdtnrf
- TLSH T13FB1E1622C0FC9BF4CB3C24767BA5643F32920660654E74574CDDABD8F2295AC72D2A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Executes a VBScript file via the Windows Script Host.
-
- Target sa-mp server/filterscripts/ferriswheel.pwn
- Size 3KB
- SHA256 47f5284d95fe337c2c3fd1240f51892f936e8035212a8f950ae7ec4a11004bdc
- MD5 f75e83948d617ad550c888966437d918
- SHA1 36b0ef12402d084f526488462a1913d3bd630421
- SHA512 fb4a0ac9a80f01bcdddf021c5a7a0d349d8cfafb1367a226dea153dd97819c108a190e15904c13c84251db962f29b1d0df8146cdf9ba4a233e38db00403b4ef3
- TLSH T1137122586F8FC0F007B3EA08A3340F52E59599392A7AC46C34DCE9D11F72D5C8A5E94E
- MD5 SHA1 SHA512 TLSH
Score5/10-
Executes a VBScript file via the Windows Script Host.
-
- Target sa-mp server/filterscripts/fsdebug.pwn
- Size 57KB
- SHA256 549456be6806e8d7d6fb6bf77bf3475d579d29d93dc6ef8042b460584f1ec1cf
- MD5 fae6616d7dbabfed4f396403a3f78f35
- SHA1 b48b4f17fabad7274658f112f4505e175886d1f2
- SHA512 ff6ae35a2056380fb01392e6110da011c1f437c9d2e8f0ef04d7e5b5a278d206d5555691cc7d669449d60f066866044b11eb8d5da5357e12396ee76ebafe1e08
- SSDEEP 768:Zsh0jQGpqzSx8fi/70XPtmbVCeLQYFv1rL:yh3zc8fkYk4+L
- TLSH T1D9431DC3362F460464E0D2C1B139AC38FAB590171521BFF7F10EB78EAA5DA9C8775299
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Executes a VBScript file via the Windows Script Host.
-
- Target sa-mp server/filterscripts/kylies_barn.pwn
- Size 4KB
- SHA256 22ea39e3c524fd29e2614d73031d46f8a5b2856c2a9f8c72c869a5b776311921
- MD5 7189f041a74efd922a55b9765e9f4e50
- SHA1 1bd12fff7667d84f29eab340ab3d618985e7ace4
- SHA512 31ebe7031c2737144eaed27581ad3a1cc6d5665167643618007921736f31d1158a2f122a456125e9924c1b13f5d1e466e16000ed42b705da758564eed2cdf44b
- SSDEEP 96:0WO1TgOYIgolDu7Dphil6KRZVPNe1fqdpVpf:0WcTmIgCy7Dphi9RPFesd/pf
- TLSH T1E1910E421D4FC8B51A36C182A7ACA503F37E54220A20F782B4CEE79CDF3540AC76D697
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Executes a VBScript file via the Windows Script Host.
-
- Target sa-mp server/filterscripts/ls_apartments1.pwn
- Size 24KB
- SHA256 576964e8e703de0cc76c0da8fd6243e309812713683b9e3f4e73a247671deb0e
- MD5 90cd00b542ea71937b75aadeb723eb5d
- SHA1 43b3e6c41084f6e2aac4197d96099b3f8c58db13
- SHA512 0c8a558d0ecfae476c663a4f1928e319cf37549925880759995032b3a61450a2d6d468da46fb78639d9094fb8c4e28a2ee011b62f77a23a62ba488fcd13d2314
- SSDEEP 768:2pS98jurSlmutNhrJUBzSJB5W/T0v6h+MyxcFb/mguhNrae+/qn6IEbR7Z6:N8juiNh24W/TY6h+MyxcFb/mguhNraHO
- TLSH T1DDB297551E4E61BAEA75E450E238D063D375813651ACF2A5788DEB4CBB30CE08BECCC6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Executes a VBScript file via the Windows Script Host.
-
- Target sa-mp server/filterscripts/ls_beachside.pwn
- Size 23KB
- SHA256 3d039a36fd49abca7b6d4c58484b0eb7a3878f346e640332ebaea55760650541
- MD5 5162ca23a306f9f8d89da86f5649bdc6
- SHA1 1d69546a4123e1580afff658bdbb1ddb77b95bad
- SHA512 0da94455775f0ab1bb4c96e40931e58542781fa1792123f7e00d3dd47cb7c17806323aa54f1edb87508cfe0e9f3d7cfd492ee170cddf4323cb6f86fc0d45b368
- SSDEEP 384:25SeS9qQGHugiNG3yCc7Jp8jckpFWqJ0eM6h+MyxcFb/mZ9Y77v7Ge+e8Bqe7QMo:2NS9pGO1NOyhJpickFWqJ0v6h+MyxcFR
- TLSH T157B296591E4B6179DA71E060A238E0B3D3758569516CF2A5788DEF0CBB30CE18BDCCCA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Executes a VBScript file via the Windows Script Host.
-
- Target sa-mp server/filterscripts/ls_elevator.pwn
- Size 14KB
- SHA256 e1df2fba86b16a4cbe724acfb0c4c6030d3128eafb9edf186c109161b95457f7
- MD5 58dca3a70494602f3ee067e9e4259991
- SHA1 6b4505386e8d9860a1da7b9662be4a0b0e24d164
- SHA512 edbb49669927f38fa25ea6f17c02bec6fb2f002a5b4ee51ff327a39e32de3dda770158cbf7c354ff571f32db70cb2742035693c84e229ab4b8354bab8d8d31d8
- SSDEEP 192:1yZ/uK9dpI6XCNZ7+x/u30aC6YaRvGgC30vdegYTQpgBWqT+gPjmCJOgP5gqYeth:4duK9dpI6XCNZ7+x/u30aCYgIgSqT
- TLSH T14552B5995E83A15EEB38F160D334E077D661905A948CB7E874898EAC7B31CE20BDCCD5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Executes a VBScript file via the Windows Script Host.
-
- Target sa-mp server/filterscripts/ls_mall.pwn
- Size 15KB
- SHA256 03905c8f259abd754a01c00149be177e5625e65e2ab06ba02d5109d76be46bd4
- MD5 dd1202ca654dedb93edcf45a5128f19c
- SHA1 2142af3c2d34655717e41a73c711356a17f68c82
- SHA512 68bc9eae457f0c2d0e565e1b5d845714afe8ec2b574bf69f6541a465321f0c3a810ddc9aa116899889af675ba81f71c6b23b639632bd885261bd168fe3fc673e
- SSDEEP 192:GmWWLnbYLw3pRqHK1CxesqfaDeWn58Grke:Geb9C4TrUh
- TLSH T1E5725CE51A8484DD73438FC88332446BC193A4B95BACF355FB16D2CFC2BDA98056DB91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Executes a VBScript file via the Windows Script Host.
-
- Target sa-mp server/filterscripts/ls_prisonwalls.pwn
- Size 14KB
- SHA256 ab4a1412b5165f33bb6b09e04730d434e72b33099774a5bcde4efeb51bfe6f3b
- MD5 983fa5f8591f7c47d11eb83821718a1a
- SHA1 9af1cd998f9fe356e32f76b3f1bbd55786fbc0cc
- SHA512 3f39e9779ec4eb1b84c0b40e64ff832cca9f0fee309a4a03753ef8d1e41cf39f29689073abdec87390537becbca86cc3746e7eb5b8fbca5777abba27037d7a53
- SSDEEP 384:0ckv68oY3n78nB7bZf/fEAFOStMlI7L5i7Hi74DdY/BfrW7j7r6zu7CAgs+:0Lv68oY378nFeAFBMlI7L4HC4DdY/Bfj
- TLSH T1AC6251A15F0883B27932E34452B5A492EF79E10B1724F6CAB4DEE7497B37A44423C9D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Executes a VBScript file via the Windows Script Host.
-
- Target sa-mp server/filterscripts/ls_wellsfargo.pwn
- Size 4KB
- SHA256 739cb04586b177836b05ca4a717f756677d36f463ee80860aa29f2d1a0b3bc01
- MD5 c25fe30437fa0117f27091b3218c9989
- SHA1 960d18d572ae973be8609f017cb3c7d88c8b5a30
- SHA512 c061333ce18592e48feb0711d85e96cf747bada795b857918df2da45cbb9eba0b837c2a0305b7b6dc8dfb1604c76087e67d0da94348f8dc8384cf63c20d45c23
- SSDEEP 96:0fTkzcOL2BgoazxfCf7ZpLZ/k6KRz/tf1Hkvqdj4f:0gzx2Bg5zZi7ZpLZMvRzFfZKqdj4f
- TLSH T1A7912E521C8EC1F24461C046A3BA9643E32964A68720F747B4CFF6AC9F36844CB3D693
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Executes a VBScript file via the Windows Script Host.
-
- Target sa-mp server/filterscripts/ospawner.pwn
- Size 14KB
- SHA256 4a4940eb1c5fc9f1c73ecc3cb561b7e0fa399846ff8c460be6f79ed5cf96b7db
- MD5 ac56cf896cf138d10fd47a2bbe7c15ba
- SHA1 4eaf4275f7bfbeba08c96b73256897199768fb5f
- SHA512 06638f388076473c0bf6dbdd68de019a32579cbe0cc95dd378abf1382c1b3cb8a1ff202d2edfca9b9761920b1e8ced4b4118326756600fce615d1ae0694178d0
- SSDEEP 192:ceSZ66dLAN2LQdLSwyqc0z31z3vEor0nYyX1fpaYSnHAoP:cey/TmQUJF
- TLSH T1DA520E093C5F81791E67E98AE3B2B800FEB8614B51D0A752F85DF20D2F7E82C436D5A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Executes a VBScript file via the Windows Script Host.
-
- Target sa-mp server/filterscripts/pirateship.pwn
- Size 6KB
- SHA256 cc06766df6fbb944a20e54ff6c9a6c3b54207135c3af46c0e3a9bc0f2afb2a71
- MD5 8f49b4690eb5d82074d8814ae7dfaaed
- SHA1 4a300f7ddba1f32243c97a8252b52408f451cdb3
- SHA512 9fb7f3e961659412b51b1d1ea5f031622414fc7dff7a288a9f98e2b76e1ab21608f106050a1ab428dc452aa780eb9340fad93a8f23044d929c1644161c2f2cb3
- SSDEEP 48:Vq4gmHy8D3cvhQVZ6hfEv8+DTTGwF/7zBVkqCzyuSstHIUQ9UkRZlKHocVklzyqL:VcqL6CxThF//WtHIUQWkRZgClXwU7
- TLSH T153D1ACFA5F96C0966A2ADACDB3B04203D316CB3C7986E2947ADDC0C88F56005CD7DA57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Executes a VBScript file via the Windows Script Host.
-
- Target sa-mp server/filterscripts/safe_animated.pwn
- Size 6KB
- SHA256 82641a059f172899486cf137f6c8c284b65c632b8f5e953b74c64885a3770e1a
- MD5 7e29d49426f30836009d402464978b2e
- SHA1 56bd08c4fedf051a814466d8333780734926be84
- SHA512 2a1e64afabcd3ce80206c4d33ac71dd51da5ff147550416c665ad8abdde5f0785c8cf7965fee537696506da229a6ec854fa803b179905635053d7e5c6bb6d6ef
- SSDEEP 192:0fsEFUn7AL7sTX7Ihf7s7t7UMpqzRAEiK4f:0fsnn7Q7O7wf7G7ZqzqlL
- TLSH T1D0D1124A5E0E82B56A72C25163797943EB3924230670E352B0CEDAACAF76514D37CBD3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Executes a VBScript file via the Windows Script Host.