a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144

Analysis

max time kernel
90s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
27/03/2023, 10:21

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
Size

11.4MB
MD5

a95b8d7b7aaf05b995b016f053ec0367
SHA1

67b6821c346ce6eb6ec8242c101a2543a0be02ae
SHA256

a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144
SHA512

8f12b23cefe6d62abb5aebe85837e700ca1036c9bd0dfa6d61fb3f8143c71c9dc999ec8ad05c9061efc469d11e2adad1b25b797e80472a33fa277d00117ece79
SSDEEP

196608:qZM6CNoKWghF6iDvbRdoM8ozdu9UTGo+GQPoP7daVZN+GiGAk4SAjEp9XZM6CNo9:AUFlDvbRdoMDJOCsrFgpSMEPP6k

Score

4^/10

Malware Config

Signatures

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\u2bat.tmpl	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File created	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\VeCom\CDF_SoftingAG_EDIC-PDU-API_1.20.042.xml	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File opened for modification	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\VeCom\VAS5054\SYS54BK.bin	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File opened for modification	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\VeCom\VAS5054\vas5054.ini	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File opened for modification	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\VeCom\vecomW32FWcl2.dll	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File created	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\DRIVER\mfcm100.dll	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File opened for modification	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\VeCom\EDICpci\BootEPci.sbn	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File created	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\VeCom\vcifedic_pdu.dll	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File opened for modification	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\PDUAPI_Demonstrator	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File opened for modification	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\VeCom\vcloliman_pdu.dll	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File opened for modification	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\VeCom\vecomw32fwj25proc.exe	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File opened for modification	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\config	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File opened for modification	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\DRIVER\msvcr100.dll	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File created	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\Installer_x64.exe	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File opened for modification	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\UNINST.BAT	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File created	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\monpjaguar.cat	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File opened for modification	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\ShortName.txt	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File created	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\VeCom\EDICpci\LoadEPci.sbn	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File created	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\DRIVER\mfc100.dll	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File opened for modification	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\VeCom\VAS5054\Eidb54Ld.cnf	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File created	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\VeCom\vecomw32fwcxlproc.exe	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File opened for modification	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\Doc	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File created	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\VeCom\VAS5054\Flash54.cnf	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File opened for modification	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\VeCom\vecomW32FWdoip.dll	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File opened for modification	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\DRIVER\mfcm100.dll	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File opened for modification	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\InstallCount.txt	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File created	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\PDUAPI_Demonstrator\helper_functions.cpp	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File created	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\PDUAPI_Demonstrator\pduapi_demonstrator.vcproj	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File created	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\PDUAPI_Demonstrator\pduapi_wrapper.h	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File opened for modification	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\VeCom\DoIPConMan.dll	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File created	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\VeCom\vcif_pdu.dll	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File opened for modification	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\PDUAPI_Demonstrator\pdu_api.h	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File opened for modification	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\u2.txt	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File opened for modification	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\UNINSTBAT.tmpl	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File opened for modification	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\VeCom\canL2.dll	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File opened for modification	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\config\License.bin	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File opened for modification	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\DRIVER\mfc100.dll	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File created	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\j2534_loader.dll	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File opened for modification	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\PDUAPI_Demonstrator\pduapi_demonstrator.cpp	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File opened for modification	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\VeCom\canlib32.dll	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File created	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\VeCom\VAS5054\Eidb54Ld.cnf	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File opened for modification	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\DRIVER	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File created	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\WdfCoInstaller01009.dll	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File created	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\InstallCount.txt	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File opened for modification	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\VeCom\CDF_SoftingAG_EDIC-PDU-API_1.20.042.xml	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File created	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\VeCom\vcerrors_pdu.dll	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File opened for modification	C:\Program Files (x86)\Softing\Softing\D-PDU API	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File opened for modification	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\monpj432.dll	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File opened for modification	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\pduapitest\D-PDUAPI_Test.exe	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File opened for modification	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\VeCom\EDICpci\LoadEPci.sbn	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File created	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\VeCom\ftpllclient.dll	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File created	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\VeCom\VAS5054\SYS54.bin	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File opened for modification	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\DRIVER\EDIC\WdfCoInstaller01009.dll	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File opened for modification	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\monpjaguar.inf	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File opened for modification	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\VeCom\netscripter.dll	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File opened for modification	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\VeCom\vcprotman_pdu.dll	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File created	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\VeCom\vecomW32FWkvs.dll	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File opened for modification	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\PDUAPI_Demonstrator\PDUAPI_Demonstrator.h	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File created	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\VeCom\rdf.xml	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File opened for modification	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\VeCom\VAS5054\Flash54.cnf	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File opened for modification	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\VeCom\vxlapi.dll	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File created	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\vecom.cmd	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File opened for modification	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\DRIVER\EDIC	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
File created	C:\Program Files (x86)\Softing\Softing\D-PDU API\1.20.042\DRIVER\EDIC\WdfCoInstaller01009.dll	a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe

C:\Users\Admin\AppData\Local\Temp\a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe
"C:\Users\Admin\AppData\Local\Temp\a66c8d96405e9b45b8a69200bb35e396c17b5e658cf51808a78d2aad801a3144.exe"
1⤵
- Drops file in Program Files directory
PID:1860

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads