Overview

overview

5

Static

static

5

CADe_SIMU ....0.exe

windows7-x64

1

CADe_SIMU ....0.exe

windows10-2004-x64

1

CADe_SIMU ....2.exe

windows7-x64

1

CADe_SIMU ....2.exe

windows10-2004-x64

1

CADe_SIMU ...2D.dll

windows7-x64

1

CADe_SIMU ...2D.dll

windows10-2004-x64

1

CADe_SIMU ...2D.dll

windows7-x64

1

CADe_SIMU ...2D.dll

windows10-2004-x64

1

CADe_SIMU ...TD.dll

windows7-x64

3

CADe_SIMU ...TD.dll

windows10-2004-x64

3

CADe_SIMU ...ne.dll

windows7-x64

1

CADe_SIMU ...ne.dll

windows10-2004-x64

1

CADe_SIMU ...de.chm

windows7-x64

1

CADe_SIMU ...de.chm

windows10-2004-x64

1

CADe_SIMU ...en.chm

windows7-x64

1

CADe_SIMU ...en.chm

windows10-2004-x64

1

CADe_SIMU ...im.exe

windows7-x64

1

CADe_SIMU ...im.exe

windows10-2004-x64

1

CADe_SIMU ...de.pdf

windows7-x64

1

CADe_SIMU ...de.pdf

windows10-2004-x64

1

CADe_SIMU ...en.pdf

windows7-x64

1

CADe_SIMU ...en.pdf

windows10-2004-x64

1

CADe_SIMU ...ve.dll

windows7-x64

3

CADe_SIMU ...ve.dll

windows10-2004-x64

3

Analysis

  • max time kernel
    148s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11-06-2024 14:51

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    CADe_SIMU V4.2/Nettoplcsim-S7o-v-1-1-0-0/bin/NetToPLCsim-Manual-de.chm

  • Size

    457KB

  • MD5

    d154072d182820d83adad497f261ddb8

  • SHA1

    b58281c6d178996420dd6f8f504cbb892b7c6def

  • SHA256

    6c3dc0a9e279152a3c9738578e676d2d1757107830e64551894996db41ad512a

  • SHA512

    0670b119fbb29a56c3b83de65267b377443ed5221fb62132ec9c805fc3badd37570880cf5738b5b07a9c6b78c17f9b9c445dd29abc6cd6f247a8b13e0d04fbaa

  • SSDEEP

    12288:S0PNxFG31EsanesT0OX01c+dVsX4Y33psutnYUJO5O:MXeesT0vcgsPqoCO

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Windows\hh.exe
    "C:\Windows\hh.exe" "C:\Users\Admin\AppData\Local\Temp\CADe_SIMU V4.2\Nettoplcsim-S7o-v-1-1-0-0\bin\NetToPLCsim-Manual-de.chm"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1344

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads