3c93d8b1e69fab840a52746dc183e2bcac113cf1f05bd558a689c0bb5f24f4aa

Submit
Reports

Overview

overview

Static

static

CADe_SIMU ....0.exe

windows7-x64

CADe_SIMU ....0.exe

windows10-2004-x64

CADe_SIMU ....2.exe

windows7-x64

CADe_SIMU ....2.exe

windows10-2004-x64

CADe_SIMU ...2D.dll

windows7-x64

CADe_SIMU ...2D.dll

windows10-2004-x64

CADe_SIMU ...2D.dll

windows7-x64

CADe_SIMU ...2D.dll

windows10-2004-x64

CADe_SIMU ...TD.dll

windows7-x64

CADe_SIMU ...TD.dll

windows10-2004-x64

CADe_SIMU ...ne.dll

windows7-x64

CADe_SIMU ...ne.dll

windows10-2004-x64

CADe_SIMU ...de.chm

windows7-x64

CADe_SIMU ...de.chm

windows10-2004-x64

CADe_SIMU ...en.chm

windows7-x64

CADe_SIMU ...en.chm

windows10-2004-x64

CADe_SIMU ...im.exe

windows7-x64

CADe_SIMU ...im.exe

windows10-2004-x64

CADe_SIMU ...de.pdf

windows7-x64

CADe_SIMU ...de.pdf

windows10-2004-x64

CADe_SIMU ...en.pdf

windows7-x64

CADe_SIMU ...en.pdf

windows10-2004-x64

CADe_SIMU ...ve.dll

windows7-x64

CADe_SIMU ...ve.dll

windows10-2004-x64

Analysis

max time kernel
145s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
11-06-2024 14:51

Sharing

Copy URL

Twitter E-mail

Static task

static1

pdf

2 signatures

Behavioral task

behavioral1

Sample

CADe_SIMU V4.2/CADe_SIMU_V4.0.exe

Resource

win7-20240221-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

CADe_SIMU V4.2/CADe_SIMU_V4.0.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

CADe_SIMU V4.2/CADe_SIMU_V4.2.exe

Resource

win7-20240215-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

CADe_SIMU V4.2/CADe_SIMU_V4.2.exe

Resource

win10v2004-20240426-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

CADe_SIMU V4.2/MFC42D.dll

Resource

win7-20240508-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

CADe_SIMU V4.2/MFC42D.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

CADe_SIMU V4.2/MFCO42D.dll

Resource

win7-20240220-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral8

Sample

CADe_SIMU V4.2/MFCO42D.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral9

Sample

CADe_SIMU V4.2/MSVCRTD.dll

Resource

win7-20240508-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral10

Sample

CADe_SIMU V4.2/MSVCRTD.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral11

Sample

CADe_SIMU V4.2/Nettoplcsim-S7o-v-1-1-0-0/bin/IsoToS7online.dll

Resource

win7-20240215-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

CADe_SIMU V4.2/Nettoplcsim-S7o-v-1-1-0-0/bin/IsoToS7online.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

CADe_SIMU V4.2/Nettoplcsim-S7o-v-1-1-0-0/bin/NetToPLCsim-Manual-de.chm

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral14

Sample

CADe_SIMU V4.2/Nettoplcsim-S7o-v-1-1-0-0/bin/NetToPLCsim-Manual-de.chm

Resource

win10v2004-20240426-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

CADe_SIMU V4.2/Nettoplcsim-S7o-v-1-1-0-0/bin/NetToPLCsim-Manual-en.chm

Resource

win7-20240508-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral16

Sample

CADe_SIMU V4.2/Nettoplcsim-S7o-v-1-1-0-0/bin/NetToPLCsim-Manual-en.chm

Resource

win10v2004-20240508-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

CADe_SIMU V4.2/Nettoplcsim-S7o-v-1-1-0-0/bin/NetToPLCsim.exe

Resource

win7-20240220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

CADe_SIMU V4.2/Nettoplcsim-S7o-v-1-1-0-0/bin/NetToPLCsim.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

CADe_SIMU V4.2/Nettoplcsim-S7o-v-1-1-0-0/doc/NetToPLCsim-Manual-de.pdf

Resource

win7-20240508-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral20

Sample

CADe_SIMU V4.2/Nettoplcsim-S7o-v-1-1-0-0/doc/NetToPLCsim-Manual-de.pdf

Resource

win10v2004-20240226-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral21

Sample

CADe_SIMU V4.2/Nettoplcsim-S7o-v-1-1-0-0/doc/NetToPLCsim-Manual-en.pdf

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral22

Sample

CADe_SIMU V4.2/Nettoplcsim-S7o-v-1-1-0-0/doc/NetToPLCsim-Manual-en.pdf

Resource

win10v2004-20240426-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral23

Sample

CADe_SIMU V4.2/libnodave.dll

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral24

Sample

CADe_SIMU V4.2/libnodave.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

2 signatures

150 seconds

Report Analysis Logs

General

Target

CADe_SIMU V4.2/Nettoplcsim-S7o-v-1-1-0-0/bin/NetToPLCsim-Manual-en.chm
Size

454KB
MD5

9896212c55797644b26f455f08afc3a6
SHA1

91a8cd3597f5767f4bd5211cd51e880156b0ecec
SHA256

570df5675632bdf60850ab3785574f97d6996fe9a05b77cf975a7d35f9f9cf00
SHA512

342b347dc97d7e1931b4e573f85bd153d85e406ac750ba48aa83a1624169c75c8e5cb72486e5bcf32fbf9618b9abd2242ff0fbcbc9ffec225426cbeb68d63a64
SSDEEP

12288:mMmLAq7z4EyPJWA1cmDAL9IXGkSKC3QU7lnMaaa+:m1jzVyPJ31U9XNQYMtF

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2432	hh.exe
2432	hh.exe

Processes

C:\Windows\hh.exe
"C:\Windows\hh.exe" "C:\Users\Admin\AppData\Local\Temp\CADe_SIMU V4.2\Nettoplcsim-S7o-v-1-1-0-0\bin\NetToPLCsim-Manual-en.chm"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2432

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads