Overview
overview
5Static
static
5CADe_SIMU ....0.exe
windows7-x64
1CADe_SIMU ....0.exe
windows10-2004-x64
1CADe_SIMU ....2.exe
windows7-x64
1CADe_SIMU ....2.exe
windows10-2004-x64
1CADe_SIMU ...2D.dll
windows7-x64
1CADe_SIMU ...2D.dll
windows10-2004-x64
1CADe_SIMU ...2D.dll
windows7-x64
1CADe_SIMU ...2D.dll
windows10-2004-x64
1CADe_SIMU ...TD.dll
windows7-x64
3CADe_SIMU ...TD.dll
windows10-2004-x64
3CADe_SIMU ...ne.dll
windows7-x64
1CADe_SIMU ...ne.dll
windows10-2004-x64
1CADe_SIMU ...de.chm
windows7-x64
1CADe_SIMU ...de.chm
windows10-2004-x64
1CADe_SIMU ...en.chm
windows7-x64
1CADe_SIMU ...en.chm
windows10-2004-x64
1CADe_SIMU ...im.exe
windows7-x64
1CADe_SIMU ...im.exe
windows10-2004-x64
1CADe_SIMU ...de.pdf
windows7-x64
1CADe_SIMU ...de.pdf
windows10-2004-x64
1CADe_SIMU ...en.pdf
windows7-x64
1CADe_SIMU ...en.pdf
windows10-2004-x64
1CADe_SIMU ...ve.dll
windows7-x64
3CADe_SIMU ...ve.dll
windows10-2004-x64
3Analysis
-
max time kernel
117s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
11/06/2024, 14:51
Behavioral task
behavioral1
Sample
CADe_SIMU V4.2/CADe_SIMU_V4.0.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
CADe_SIMU V4.2/CADe_SIMU_V4.0.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
CADe_SIMU V4.2/CADe_SIMU_V4.2.exe
Resource
win7-20240215-en
Behavioral task
behavioral4
Sample
CADe_SIMU V4.2/CADe_SIMU_V4.2.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
CADe_SIMU V4.2/MFC42D.dll
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
CADe_SIMU V4.2/MFC42D.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
CADe_SIMU V4.2/MFCO42D.dll
Resource
win7-20240220-en
Behavioral task
behavioral8
Sample
CADe_SIMU V4.2/MFCO42D.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
CADe_SIMU V4.2/MSVCRTD.dll
Resource
win7-20240508-en
Behavioral task
behavioral10
Sample
CADe_SIMU V4.2/MSVCRTD.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
CADe_SIMU V4.2/Nettoplcsim-S7o-v-1-1-0-0/bin/IsoToS7online.dll
Resource
win7-20240215-en
Behavioral task
behavioral12
Sample
CADe_SIMU V4.2/Nettoplcsim-S7o-v-1-1-0-0/bin/IsoToS7online.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral13
Sample
CADe_SIMU V4.2/Nettoplcsim-S7o-v-1-1-0-0/bin/NetToPLCsim-Manual-de.chm
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
CADe_SIMU V4.2/Nettoplcsim-S7o-v-1-1-0-0/bin/NetToPLCsim-Manual-de.chm
Resource
win10v2004-20240426-en
Behavioral task
behavioral15
Sample
CADe_SIMU V4.2/Nettoplcsim-S7o-v-1-1-0-0/bin/NetToPLCsim-Manual-en.chm
Resource
win7-20240508-en
Behavioral task
behavioral16
Sample
CADe_SIMU V4.2/Nettoplcsim-S7o-v-1-1-0-0/bin/NetToPLCsim-Manual-en.chm
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
CADe_SIMU V4.2/Nettoplcsim-S7o-v-1-1-0-0/bin/NetToPLCsim.exe
Resource
win7-20240220-en
Behavioral task
behavioral18
Sample
CADe_SIMU V4.2/Nettoplcsim-S7o-v-1-1-0-0/bin/NetToPLCsim.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
CADe_SIMU V4.2/Nettoplcsim-S7o-v-1-1-0-0/doc/NetToPLCsim-Manual-de.pdf
Resource
win7-20240508-en
Behavioral task
behavioral20
Sample
CADe_SIMU V4.2/Nettoplcsim-S7o-v-1-1-0-0/doc/NetToPLCsim-Manual-de.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
CADe_SIMU V4.2/Nettoplcsim-S7o-v-1-1-0-0/doc/NetToPLCsim-Manual-en.pdf
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
CADe_SIMU V4.2/Nettoplcsim-S7o-v-1-1-0-0/doc/NetToPLCsim-Manual-en.pdf
Resource
win10v2004-20240426-en
Behavioral task
behavioral23
Sample
CADe_SIMU V4.2/libnodave.dll
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
CADe_SIMU V4.2/libnodave.dll
Resource
win10v2004-20240508-en
General
-
Target
CADe_SIMU V4.2/CADe_SIMU_V4.0.exe
-
Size
44.7MB
-
MD5
8c47bb76c690cf4b08534ccc5b6df351
-
SHA1
512de7025584c803ba583fac956328b4f217fadb
-
SHA256
a5208930140862dd89bd01b1ee981fe0443235ccc9bf0119e7b2aee8f2fe8e91
-
SHA512
f9db18f9c4fd7d26a1f9c0b7f89ccba3e5711e7a343e536040ce2448867fd54a419b034846bbd1b437b82fce6ab3c86e7add7d89adb8d55834e175edbe8aca87
-
SSDEEP
786432:ue4+Bf1HkwCXU6W3PxoAeoWlW7qQZsL7n4s4B3H2MPs4+lI6pRT87MlUPEBkY9e+:ue4+BJkwv9nqSs4B3H2MPs4+lI6pRT8+
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1524 CADe_SIMU_V4.0.exe 1524 CADe_SIMU_V4.0.exe