Overview
overview
7Static
static
3VAG K+CAN/...st.exe
windows7-x64
4VAG K+CAN/...st.exe
windows10-2004-x64
4VAG K+CAN/...UI.dll
windows7-x64
1VAG K+CAN/...UI.dll
windows10-2004-x64
1VAG K+CAN/...XX.dll
windows7-x64
1VAG K+CAN/...XX.dll
windows10-2004-x64
1VAG K+CAN/...US.sys
windows7-x64
1VAG K+CAN/...US.sys
windows10-2004-x64
1VAG K+CAN/...IN.exe
windows7-x64
1VAG K+CAN/...IN.exe
windows10-2004-x64
1VAG K+CAN/...ng.dll
windows7-x64
1VAG K+CAN/...ng.dll
windows10-2004-x64
1VAG K+CAN/...co.dll
windows7-x64
1VAG K+CAN/...co.dll
windows10-2004-x64
1VAG K+CAN/...2k.sys
windows7-x64
1VAG K+CAN/...2k.sys
windows10-2004-x64
1VAG K+CAN/...i2.dll
windows7-x64
1VAG K+CAN/...i2.dll
windows10-2004-x64
1VAG K+CAN/...ID.dll
windows7-x64
1VAG K+CAN/...ID.dll
windows10-2004-x64
1VAG K+CAN/...om.pkg
macos-10.15-amd64
VAG K+CAN/...er.exe
windows7-x64
7VAG K+CAN/...er.exe
windows10-2004-x64
7VAG K+CAN/...st.exe
windows7-x64
4VAG K+CAN/...st.exe
windows10-2004-x64
4VAG K+CAN/...UI.dll
windows7-x64
1VAG K+CAN/...UI.dll
windows10-2004-x64
3VAG K+CAN/...XX.dll
windows7-x64
1VAG K+CAN/...XX.dll
windows10-2004-x64
1VAG K+CAN/...US.sys
windows7-x64
1VAG K+CAN/...US.sys
windows10-2004-x64
1VAG K+CAN/...IN.exe
windows7-x64
1Analysis
-
max time kernel
118s -
max time network
142s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system -
submitted
07/11/2023, 14:26
Static task
static1
Behavioral task
behavioral1
Sample
VAG K+CAN/UPDATE DO VAG COMMANDER/CDM_Setup/DPInst.exe
Resource
win7-20231023-en
windows7-x64
Behavioral task
behavioral2
Sample
VAG K+CAN/UPDATE DO VAG COMMANDER/CDM_Setup/DPInst.exe
Resource
win10v2004-20231023-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
VAG K+CAN/UPDATE DO VAG COMMANDER/CDM_Setup/FTBUSUI.dll
Resource
win7-20231023-en
windows7-x64
Behavioral task
behavioral4
Sample
VAG K+CAN/UPDATE DO VAG COMMANDER/CDM_Setup/FTBUSUI.dll
Resource
win10v2004-20231020-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
VAG K+CAN/UPDATE DO VAG COMMANDER/CDM_Setup/FTD2XX.dll
Resource
win7-20231023-en
windows7-x64
Behavioral task
behavioral6
Sample
VAG K+CAN/UPDATE DO VAG COMMANDER/CDM_Setup/FTD2XX.dll
Resource
win10v2004-20231023-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
VAG K+CAN/UPDATE DO VAG COMMANDER/CDM_Setup/FTDIBUS.sys
Resource
win7-20231023-en
windows7-x64
Behavioral task
behavioral8
Sample
VAG K+CAN/UPDATE DO VAG COMMANDER/CDM_Setup/FTDIBUS.sys
Resource
win10v2004-20231020-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
VAG K+CAN/UPDATE DO VAG COMMANDER/CDM_Setup/FTDIUNIN.exe
Resource
win7-20231020-en
windows7-x64
Behavioral task
behavioral10
Sample
VAG K+CAN/UPDATE DO VAG COMMANDER/CDM_Setup/FTDIUNIN.exe
Resource
win10v2004-20231020-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
VAG K+CAN/UPDATE DO VAG COMMANDER/CDM_Setup/FTLang.dll
Resource
win7-20231025-en
windows7-x64
Behavioral task
behavioral12
Sample
VAG K+CAN/UPDATE DO VAG COMMANDER/CDM_Setup/FTLang.dll
Resource
win10v2004-20231025-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
VAG K+CAN/UPDATE DO VAG COMMANDER/CDM_Setup/ftcserco.dll
Resource
win7-20231025-en
windows7-x64
Behavioral task
behavioral14
Sample
VAG K+CAN/UPDATE DO VAG COMMANDER/CDM_Setup/ftcserco.dll
Resource
win10v2004-20231020-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
VAG K+CAN/UPDATE DO VAG COMMANDER/CDM_Setup/ftser2k.sys
Resource
win7-20231020-en
windows7-x64
Behavioral task
behavioral16
Sample
VAG K+CAN/UPDATE DO VAG COMMANDER/CDM_Setup/ftser2k.sys
Resource
win10v2004-20231020-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
VAG K+CAN/UPDATE DO VAG COMMANDER/CDM_Setup/ftserui2.dll
Resource
win7-20231023-en
windows7-x64
Behavioral task
behavioral18
Sample
VAG K+CAN/UPDATE DO VAG COMMANDER/CDM_Setup/ftserui2.dll
Resource
win10v2004-20231023-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
VAG K+CAN/UPDATE DO VAG COMMANDER/FTChipID.dll
Resource
win7-20231023-en
windows7-x64
Behavioral task
behavioral20
Sample
VAG K+CAN/UPDATE DO VAG COMMANDER/FTChipID.dll
Resource
win10v2004-20231023-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
VAG K+CAN/UPDATE DO VAG COMMANDER/rom.pkg
Resource
macos-20220504-en
macos-10.15-amd64
Behavioral task
behavioral22
Sample
VAG K+CAN/UPDATE DO VAG COMMANDER/updater.exe
Resource
win7-20231020-en
windows7-x64
Behavioral task
behavioral23
Sample
VAG K+CAN/UPDATE DO VAG COMMANDER/updater.exe
Resource
win10v2004-20231020-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
VAG K+CAN/VAG K+CAN V3.6/CDM_Setup/DPInst.exe
Resource
win7-20231020-en
windows7-x64
Behavioral task
behavioral25
Sample
VAG K+CAN/VAG K+CAN V3.6/CDM_Setup/DPInst.exe
Resource
win10v2004-20231023-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
VAG K+CAN/VAG K+CAN V3.6/CDM_Setup/FTBUSUI.dll
Resource
win7-20231023-en
windows7-x64
Behavioral task
behavioral27
Sample
VAG K+CAN/VAG K+CAN V3.6/CDM_Setup/FTBUSUI.dll
Resource
win10v2004-20231023-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
VAG K+CAN/VAG K+CAN V3.6/CDM_Setup/FTD2XX.dll
Resource
win7-20231023-en
windows7-x64
Behavioral task
behavioral29
Sample
VAG K+CAN/VAG K+CAN V3.6/CDM_Setup/FTD2XX.dll
Resource
win10v2004-20231023-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
VAG K+CAN/VAG K+CAN V3.6/CDM_Setup/FTDIBUS.sys
Resource
win7-20231020-en
windows7-x64
Behavioral task
behavioral31
Sample
VAG K+CAN/VAG K+CAN V3.6/CDM_Setup/FTDIBUS.sys
Resource
win10v2004-20231023-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
VAG K+CAN/VAG K+CAN V3.6/CDM_Setup/FTDIUNIN.exe
Resource
win7-20231025-en
windows7-x64
General
-
Target
VAG K+CAN/UPDATE DO VAG COMMANDER/CDM_Setup/FTDIUNIN.exe
-
Size
184KB
-
MD5
9a411917e84142c706358a74e753ab38
-
SHA1
5ee4d0293fc2b5e916a5cd3ebe5ffd25dfc28c09
-
SHA256
3b0129a0fcd4f5ca649444358afdf852c878a2f539be897bf0519d07e8561413
-
SHA512
e7c48120e09bf389968268d5986922439a95d8ea604ba26fb8d2fbbcbf5cb559b14ce1b267b3685b8aca494eab54d740c66a2a4b9d81035a2ef198ca1c17635f
-
SSDEEP
3072:VIvkMUaUUIwtmCAipwDKyZCLiBhmdsTIKXNcBtw3x:+kMUaJLAipLkVTRi0B
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1728 FTDIUNIN.exe