Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
5Static
static
5CADe_SIMU ....2.exe
windows10-2004-x64
1CADe_SIMU ...ca.url
windows10-2004-x64
1CADe_SIMU ...be.url
windows10-2004-x64
1CADe_SIMU ...2D.dll
windows10-2004-x64
1CADe_SIMU ...2D.dll
windows10-2004-x64
1CADe_SIMU ...TD.dll
windows10-2004-x64
3CADe_SIMU ...be.url
windows10-2004-x64
1CADe_SIMU ...ne.dll
windows10-2004-x64
1CADe_SIMU ...de.chm
windows10-2004-x64
1CADe_SIMU ...en.chm
windows10-2004-x64
1CADe_SIMU ...im.exe
windows10-2004-x64
1CADe_SIMU ...de.pdf
windows10-2004-x64
1CADe_SIMU ...en.pdf
windows10-2004-x64
1CADe_SIMU ...ve.dll
windows10-2004-x64
3Analysis
-
max time kernel
134s -
max time network
160s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-es -
resource tags
arch:x64arch:x86image:win10v2004-20240508-eslocale:es-esos:windows10-2004-x64systemwindows -
submitted
28/05/2024, 14:46
Behavioral task
behavioral1
Sample
CADe_SIMU 4.2/CADe_SIMU_V4.2.exe
Resource
win10v2004-20240508-es
Behavioral task
behavioral2
Sample
CADe_SIMU 4.2/El sitio del programador – PLC, robot, electricidad y neumática.url
Resource
win10v2004-20240508-es
Behavioral task
behavioral3
Sample
CADe_SIMU 4.2/ElSitioDelProgramador - YouTube.url
Resource
win10v2004-20240426-es
Behavioral task
behavioral4
Sample
CADe_SIMU 4.2/MFC42D.dll
Resource
win10v2004-20240508-es
Behavioral task
behavioral5
Sample
CADe_SIMU 4.2/MFCO42D.dll
Resource
win10v2004-20240508-es
Behavioral task
behavioral6
Sample
CADe_SIMU 4.2/MSVCRTD.dll
Resource
win10v2004-20240426-es
Behavioral task
behavioral7
Sample
CADe_SIMU 4.2/Motor trifásico con alimentación monofásica y paro marcha - YouTube.url
Resource
win10v2004-20240426-es
Behavioral task
behavioral8
Sample
CADe_SIMU 4.2/Nettoplcsim-S7o-v-1-1-0-0/bin/IsoToS7online.dll
Resource
win10v2004-20240426-es
Behavioral task
behavioral9
Sample
CADe_SIMU 4.2/Nettoplcsim-S7o-v-1-1-0-0/bin/NetToPLCsim-Manual-de.chm
Resource
win10v2004-20240426-es
Behavioral task
behavioral10
Sample
CADe_SIMU 4.2/Nettoplcsim-S7o-v-1-1-0-0/bin/NetToPLCsim-Manual-en.chm
Resource
win10v2004-20240508-es
Behavioral task
behavioral11
Sample
CADe_SIMU 4.2/Nettoplcsim-S7o-v-1-1-0-0/bin/NetToPLCsim.exe
Resource
win10v2004-20240508-es
Behavioral task
behavioral12
Sample
CADe_SIMU 4.2/Nettoplcsim-S7o-v-1-1-0-0/doc/NetToPLCsim-Manual-de.pdf
Resource
win10v2004-20240426-es
Behavioral task
behavioral13
Sample
CADe_SIMU 4.2/Nettoplcsim-S7o-v-1-1-0-0/doc/NetToPLCsim-Manual-en.pdf
Resource
win10v2004-20240426-es
Behavioral task
behavioral14
Sample
CADe_SIMU 4.2/libnodave.dll
Resource
win10v2004-20240426-es
General
-
Target
CADe_SIMU 4.2/CADe_SIMU_V4.2.exe
-
Size
38.5MB
-
MD5
7133e92c7d8c1b965bd58ff03dd743f6
-
SHA1
65f34de74e4c0f1e8fd9e400ed9b698a8309ba35
-
SHA256
07df299e6892c2f1b6a66d19f96b1dce13523ced14d4f7807076f730680a4ffd
-
SHA512
e436f744a3f50d6e26b18e50e4d26c12041ed786f139a926af872e2327313e07e664d948a612e74679b1c84667d2fe84dae8c63f54d09881b98b36706b0f35b3
-
SSDEEP
786432:Ye4/h7VnUwS30aW3/BYQe4WlW76QZcL7nIs4B3H2MPs4+lI6pRT87MlUPEBkY9ei:Ye4/hdUwfdX6ys4B3H2MPs4+lI6pRT8i
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1684 CADe_SIMU_V4.2.exe 1684 CADe_SIMU_V4.2.exe