Overview
overview
9Static
static
7CanLedger_...nu.rar
windows7-x64
9CanLedger_...nu.rar
windows10-2004-x64
3CanLedger_...er.exe
windows7-x64
9CanLedger_...er.exe
windows10-2004-x64
9CanLedger_...g.json
windows7-x64
3CanLedger_...g.json
windows10-2004-x64
3CanLedger_...64.lua
windows7-x64
3CanLedger_...64.lua
windows10-2004-x64
3CanLedger_...99x.js
windows7-x64
1CanLedger_...99x.js
windows10-2004-x64
1CanLedger_...on.lua
windows7-x64
1CanLedger_...on.lua
windows10-2004-x64
1CanLedger_....1.lua
windows7-x64
3CanLedger_....1.lua
windows10-2004-x64
3CanLedger_...me.api
windows7-x64
3CanLedger_...me.api
windows10-2004-x64
3CanLedger_...68.lua
windows7-x64
3CanLedger_...68.lua
windows10-2004-x64
3CanLedger_...mo.lua
windows7-x64
3CanLedger_...mo.lua
windows10-2004-x64
3CanLedger_...nu.lua
windows7-x64
3CanLedger_...nu.lua
windows10-2004-x64
3CanLedger_...xample
windows7-x64
3CanLedger_...xample
windows10-2004-x64
3CanLedger_...re.lua
windows7-x64
3CanLedger_...re.lua
windows10-2004-x64
3CanLedger_...le.lua
windows7-x64
3CanLedger_...le.lua
windows10-2004-x64
3CanLedger_...on.lua
windows7-x64
3CanLedger_...on.lua
windows10-2004-x64
3CanLedger_...s.json
windows7-x64
3CanLedger_...s.json
windows10-2004-x64
3Behavioral task
behavioral1
Sample
CanLedger_Mod_Menu.rar
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
CanLedger_Mod_Menu.rar
Resource
win10v2004-20240419-en
Behavioral task
behavioral3
Sample
CanLedger_Mod_Menu/CanLedger Mod Menu/CanLedger.exe
Resource
win7-20240220-en
Behavioral task
behavioral4
Sample
CanLedger_Mod_Menu/CanLedger Mod Menu/CanLedger.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
CanLedger_Mod_Menu/CanLedger Mod Menu/config.json
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
CanLedger_Mod_Menu/CanLedger Mod Menu/config.json
Resource
win10v2004-20240426-en
Behavioral task
behavioral7
Sample
CanLedger_Mod_Menu/CanLedger Mod Menu/scripts/Acid Lab v1.64.lua
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
CanLedger_Mod_Menu/CanLedger Mod Menu/scripts/Acid Lab v1.64.lua
Resource
win10v2004-20240426-en
Behavioral task
behavioral9
Sample
CanLedger_Mod_Menu/CanLedger Mod Menu/scripts/Add Snacks and Armour 99999x.js
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
CanLedger_Mod_Menu/CanLedger Mod Menu/scripts/Add Snacks and Armour 99999x.js
Resource
win10v2004-20240419-en
Behavioral task
behavioral11
Sample
CanLedger_Mod_Menu/CanLedger Mod Menu/scripts/NightClub Cargo&Shipments 3.5 million.lua
Resource
win7-20240419-en
Behavioral task
behavioral12
Sample
CanLedger_Mod_Menu/CanLedger Mod Menu/scripts/NightClub Cargo&Shipments 3.5 million.lua
Resource
win10v2004-20240419-en
Behavioral task
behavioral13
Sample
CanLedger_Mod_Menu/CanLedger Mod Menu/scripts/OP_Recovery_V2.1.lua
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
CanLedger_Mod_Menu/CanLedger Mod Menu/scripts/OP_Recovery_V2.1.lua
Resource
win10v2004-20240419-en
Behavioral task
behavioral15
Sample
CanLedger_Mod_Menu/CanLedger Mod Menu/scripts/Readme.api
Resource
win7-20240215-en
Behavioral task
behavioral16
Sample
CanLedger_Mod_Menu/CanLedger Mod Menu/scripts/Readme.api
Resource
win10v2004-20240419-en
Behavioral task
behavioral17
Sample
CanLedger_Mod_Menu/CanLedger Mod Menu/scripts/Silent_Night_v1.68.lua
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
CanLedger_Mod_Menu/CanLedger Mod Menu/scripts/Silent_Night_v1.68.lua
Resource
win10v2004-20240419-en
Behavioral task
behavioral19
Sample
CanLedger_Mod_Menu/CanLedger Mod Menu/scripts/demo.lua
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
CanLedger_Mod_Menu/CanLedger Mod Menu/scripts/demo.lua
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
CanLedger_Mod_Menu/CanLedger Mod Menu/scripts/menu.lua
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
CanLedger_Mod_Menu/CanLedger Mod Menu/scripts/menu.lua
Resource
win10v2004-20240419-en
Behavioral task
behavioral23
Sample
CanLedger_Mod_Menu/CanLedger Mod Menu/scripts/sirius.lua.example
Resource
win7-20240220-en
Behavioral task
behavioral24
Sample
CanLedger_Mod_Menu/CanLedger Mod Menu/scripts/sirius.lua.example
Resource
win10v2004-20240419-en
Behavioral task
behavioral25
Sample
CanLedger_Mod_Menu/CanLedger Mod Menu/scripts/ucrequire.lua
Resource
win7-20231129-en
Behavioral task
behavioral26
Sample
CanLedger_Mod_Menu/CanLedger Mod Menu/scripts/ucrequire.lua
Resource
win10v2004-20240419-en
Behavioral task
behavioral27
Sample
CanLedger_Mod_Menu/CanLedger Mod Menu/scripts/vehicle.lua
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
CanLedger_Mod_Menu/CanLedger Mod Menu/scripts/vehicle.lua
Resource
win10v2004-20240419-en
Behavioral task
behavioral29
Sample
CanLedger_Mod_Menu/CanLedger Mod Menu/scripts/weapon.lua
Resource
win7-20240220-en
Behavioral task
behavioral30
Sample
CanLedger_Mod_Menu/CanLedger Mod Menu/scripts/weapon.lua
Resource
win10v2004-20240419-en
Behavioral task
behavioral31
Sample
CanLedger_Mod_Menu/CanLedger Mod Menu/teleports.json
Resource
win7-20240419-en
Behavioral task
behavioral32
Sample
CanLedger_Mod_Menu/CanLedger Mod Menu/teleports.json
Resource
win10v2004-20240419-en
General
-
Target
CanLedger_Mod_Menu.rar
-
Size
16.9MB
-
MD5
5150c77389c07006b07454b8d9c24ad1
-
SHA1
25d3cfc8fe32668692a6ce3b3c5011d7bd584ff9
-
SHA256
d2e287d28ae739535a03ea92169b35539b6d76b2bd8e5d31b8cc81b39ad919bc
-
SHA512
c1e995d528cd0e779ce7be65357b9bd806839e52e577cee7594ac62d184cf054082a058a12c7361e94c8d29bef787ec95db93d7aa737c15ba8032c64df1c441e
-
SSDEEP
393216:3w0/zL1Rcw+TCGZ8FGYKUb6SM17kEUbsFgTbA2mgFGfeGk0QXF:A0/1Rf+T7+uSvE60gFGfeD0U
Malware Config
Signatures
-
resource yara_rule static1/unpack001/CanLedger_Mod_Menu/CanLedger Mod Menu/CanLedger.exe themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/CanLedger_Mod_Menu/CanLedger Mod Menu/CanLedger.exe
Files
-
CanLedger_Mod_Menu.rar.rar
-
CanLedger_Mod_Menu/CanLedger Mod Menu/CanLedger.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Size: 989KB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 75KB - Virtual size: 175KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 23KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 24.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 15.8MB - Virtual size: 15.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
-
CanLedger_Mod_Menu/CanLedger Mod Menu/config.json
-
CanLedger_Mod_Menu/CanLedger Mod Menu/scripts/Acid Lab v1.64.lua
-
CanLedger_Mod_Menu/CanLedger Mod Menu/scripts/Add Snacks and Armour 99999x.lua.js
-
CanLedger_Mod_Menu/CanLedger Mod Menu/scripts/NightClub Cargo&Shipments 3.5 million.lua
-
CanLedger_Mod_Menu/CanLedger Mod Menu/scripts/OP_Recovery_V2.1.lua
-
CanLedger_Mod_Menu/CanLedger Mod Menu/scripts/Readme.api
-
CanLedger_Mod_Menu/CanLedger Mod Menu/scripts/Silent_Night_v1.68.lua
-
CanLedger_Mod_Menu/CanLedger Mod Menu/scripts/demo.lua
-
CanLedger_Mod_Menu/CanLedger Mod Menu/scripts/menu.lua
-
CanLedger_Mod_Menu/CanLedger Mod Menu/scripts/sirius.lua.example
-
CanLedger_Mod_Menu/CanLedger Mod Menu/scripts/ucrequire.lua
-
CanLedger_Mod_Menu/CanLedger Mod Menu/scripts/vehicle.lua
-
CanLedger_Mod_Menu/CanLedger Mod Menu/scripts/weapon.lua
-
CanLedger_Mod_Menu/CanLedger Mod Menu/teleports.json
-
CanLedger_Mod_Menu/CanLedger Mod Menu/themes.json
-
CanLedger_Mod_Menu/CanLedger Mod Menu/vehicles.json