Overview

overview

1

Static

static

1

vehicles/M...us.xml

windows7-x64

1

vehicles/M...us.xml

windows10-2004-x64

1

vehicles/M...mb.xml

windows7-x64

1

vehicles/M...mb.xml

windows10-2004-x64

1

vehicles/M...pe.xml

windows7-x64

1

vehicles/M...pe.xml

windows10-2004-x64

1

vehicles/M...to.xml

windows7-x64

1

vehicles/M...to.xml

windows10-2004-x64

1

vehicles/M...y.html

windows7-x64

1

vehicles/M...y.html

windows10-2004-x64

1

vehicles/M...y.html

windows7-x64

1

vehicles/M...y.html

windows10-2004-x64

1

vehicles/M...ont.js

windows7-x64

1

vehicles/M...ont.js

windows10-2004-x64

1

vehicles/M...y.html

windows7-x64

1

vehicles/M...y.html

windows10-2004-x64

1

vehicles/M...lay.js

windows7-x64

1

vehicles/M...lay.js

windows10-2004-x64

1

vehicles/M...bus.js

windows7-x64

1

vehicles/M...bus.js

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Man_Lion_X27_S_Coach_modland.zip

  • Size

    98.3MB

  • Sample

    230403-q47ewagg4t

  • MD5

    bf6a3f453db3c28935294c3149546581

  • SHA1

    5362d2770c721d708bbec036808e854c5e6bb23b

  • SHA256

    c447abf354cfcce2579af96cc4e461d8e4d2f4adcc975f8f1a7cbeae36f1dea2

  • SHA512

    2e2dba83ef463389127d7112e528f9b7d3f0066878b31ef0e48c1925fd700a35734b80e560a61b62911429a6012196d697bf8e03ca93c3635e152119fd089290

  • SSDEEP

    3145728:VRV/qKL708xBtxcBbZNRIM821XFZn0nX2stjK:V/CQzaBbrRz3Z0X2L

Score
1/10

Malware Config

Targets

    • Target

      vehicles/MAN_lion/citybus.dae

    • Size

      115.2MB

    • MD5

      8bfb3654e80ec525c5b288d04f4449b3

    • SHA1

      365169afa12e242bc0af8c8297ca78c6f066ff74

    • SHA256

      b05af9edec7e4fb245ee0fab3e692a84d827deb243d62f2a76b84e2841c379a3

    • SHA512

      7e00ff9dda78d897434fb1ff4e2202ca1f7617d33e8289a7bc55e782f2b18bb82aaf4a406b3fd131b308a7d8facf3c643bed84b2bb3ee970a411bc017c0fdc7a

    • SSDEEP

      12288:oH9PDBuFrOPuY51EJOFYHAN5mp4ptEFMFcMNXS6L2RzQSS+elPsAcr628xC3Lm5A:oJ7Swc4t7tm

    Score
    1/10
    behavioral1behavioral2

    • Target

      vehicles/MAN_lion/citybus_bomb.dae

    • Size

      470KB

    • MD5

      c06b25bb620c22deb816adc7b20a7c8a

    • SHA1

      5dcc183b18a39bd07dddda85a79f27bca4372c15

    • SHA256

      83ca7090f4d4010f1003d6e132ec7c7e0c5c8885b9af1bb008236d854b79b0c8

    • SHA512

      5a1484aa5f3311e71dc6e46649293d87a1b4a2467fc4c0be55678bd43e140761f8c2ba4610cf8c752b9b6b03277edd73978053a37ab8f08c13245c31c87431df

    • SSDEEP

      1536:xJcR/F3F0QT9DJAig95gXCXDWkW0TBcMjoaf688IFN/mNCbZBi8XWaCvwrQ/ZiJT:xJcRZPCy4P63oXWZz+gwCTY8Az

    Score
    1/10
    behavioral3behavioral4

    • Target

      vehicles/MAN_lion/citybus_cape.dae

    • Size

      308KB

    • MD5

      3a1120c1baa3bb282fe8cde0ac08982a

    • SHA1

      cc1a7e686d31182d00a5c0bc765000fd9b353470

    • SHA256

      b048c02dd3ac53b370be1c479ff3f4da8dc30245cc0fd313c3190dd1c78c79a3

    • SHA512

      35262d16321f2d29ec86c77ffb02bba13346e0e19efe0286ebc9b30d2405de306dfcc912bf13328c14791ec243832eb7e930e623e96a926fb213e703a94d6d4a

    • SSDEEP

      3072:hwan04O3m5uXfmCmKQK5c6bHeVUQQ1NJ7bkcmvvLH:wmCmKQK5cqHhkH

    Score
    1/10
    behavioral5behavioral6

    • Target

      vehicles/MAN_lion/citybus_jato.dae

    • Size

      6.1MB

    • MD5

      e6324ef1eb69c63187ae8b77eef3c742

    • SHA1

      241b845e6e554f471a7a63c7c1531fc967ca876d

    • SHA256

      6962fc17ea910e99c9fb56a0abb711c60e69fc190aee069770c9bd99518fb9b4

    • SHA512

      f1860a5af2586f66a844f5b38bd5fec310a7b46af6cf7c9d9320b2f0e8d303e75adf809fcec2964459bbc94cc114c65fc60c50439738f9f0c94b1c2c04cbaf5b

    • SSDEEP

      3072:ekQ0WgOQn1KbsdJ+ixpJWzkzUdZc4z2W6K/LVOnl/eJucd/slAkVmAHEflm+4EfJ:ekQ0WgnnXJHElnM5PZ/34

    Score
    1/10
    behavioral7behavioral8

    • Target

      vehicles/MAN_lion/display/citybusDestinationDisplay.html

    • Size

      9KB

    • MD5

      1e8f989d5c1b0122dbe3f096a1b5c9bc

    • SHA1

      4d7a92835b0179e5979352400408c4e3fbc56f66

    • SHA256

      86f4c9efc693d6626e072d0dd7fde8992c3f8d01035116a941d63422b305b346

    • SHA512

      2ae01e111849b40e83bdc77e89218dc1a890b225908f99f869a1d391537ccba2a9941232040c52b3fb3579871934b1e10ff9ca206b414a2f4a656654ac23fcbb

    • SSDEEP

      192:k6YI9pRnwZQ+OYOF9TuXVKhF7CnoTq4fMo17euf0eCpJ/7:k6ZwZXOYG0lKhtCnglMu7Zsec

    Score
    1/10
    behavioral10behavioral9

    • Target

      vehicles/MAN_lion/display/citybusDisplay.html

    • Size

      9KB

    • MD5

      e80f4d83c66cd210bf89f7fb515d28fb

    • SHA1

      8fd9dc594e181ec47a33fbc0eeab56a57cd492f1

    • SHA256

      290e93656f3914225712e35299de35e82356f6bfef2eafd50abebe2c4a82e2e9

    • SHA512

      38171ccf94ba7a93b3c661c44de5650233ff023d727982d921a2282e6c56329c7e793600b3b72d31fb971fcb9344c5086a37c6e06f4c6f26e4890646e5597ef9

    • SSDEEP

      192:j6YI9pRnTQAOYOF9TW/VKhF7CpoTq4fMo17euf0eCpY/7:j6ZTfOYGgtKhtCpglMu7Zse7

    Score
    1/10
    behavioral11behavioral12

    • Target

      vehicles/MAN_lion/display/citybusDisplayFont.js

    • Size

      21KB

    • MD5

      d876f4155429f5ccd5337c5d8a923684

    • SHA1

      7775535d2e2c7ac846f2b7d6dfddfd39f27912dc

    • SHA256

      43abf6cd37a6583fcaf7a9c66bf1c169a3fbed0deffa5dcd41158cf87b592a58

    • SHA512

      0d097a3ffb3eb57ef11ed71fe27acce464975ae8105304cc5b2c84c45ace8f3090f6777a7644dc7638c07e5e871b6118549d7c86ab51d19bd00913d9a86aa798

    • SSDEEP

      192:c9k0r030G0t0q30d0y0M0V0a000Y0w0Y0A0B0J10I0I0E0k0o0I0s060X0Q0M0F3:217xx

    Score
    1/10
    behavioral13behavioral14

    • Target

      vehicles/MAN_lion/display/citybusStopDisplay.html

    • Size

      1KB

    • MD5

      d5caea1f4bba1e72a2b6d7d88ecc5685

    • SHA1

      7aa53048fb9494148d7c5efd95837c34e850a016

    • SHA256

      0c6db2ee29c3110ed077ded3817f9216b40ebe14a83f70be19c461f98fe47244

    • SHA512

      6bd8a86c096309489b71d27c1d20154eb3cef3d6d0e3aac62ef80abee35e480147d2dce3d243a8e579b9d9d1c7b4357131e5e9fc89167541438e3ed9d8f6bcb4

    Score
    1/10
    behavioral15behavioral16

    • Target

      vehicles/MAN_lion/display/citybusStopDisplay.js

    • Size

      3KB

    • MD5

      21b615e5fa08378819b655283248c7f9

    • SHA1

      7390c08119c5af5174f2e6c64095220c279966fc

    • SHA256

      ad3cdeecbc1df8626f56e2bc61670f3833c90727b4848a648d05cb5ecced6ecf

    • SHA512

      acf44313a7bae690575503115c2e141dc2fc64f80b3398160a9899045e726804553afcdcc12ffb4c063ce02d00beed1553cfea5b2b2d1eb5519a59d77cc0f37e

    Score
    1/10
    behavioral17behavioral18

    • Target

      vehicles/MAN_lion/lua/controller/bus.lua

    • Size

      9KB

    • MD5

      55a51ef175383424107cff5c23f67b7e

    • SHA1

      5828b582be92c486244b36a77225843b6a99708e

    • SHA256

      a2c6f894bdec2b0114846803ce5b37bedee68356a2940825453ec43a21f72643

    • SHA512

      b695d9e26e86fd56d5e174efbe3a20ae022c0a53463abed511bcdf665c5129e68fefdcd88a9aa4b2d67568b0efeec85a9bde080d1467930a7753b6e8104eeab0

    • SSDEEP

      192:RvN/86SALDyLdHg/7AXqgoZ4ZozpQWqtRg93c8phQbWzeT5iXMPRU3pOa0mY8i1B:ZN/87ALO5HgDMqgoZmot3iI7pebWzu5N

    Score
    1/10
    behavioral19behavioral20

MITRE ATT&CK Enterprise v6

Tasks