Overview
overview
5Static
static
5CADe_SIMU ....0.exe
windows7-x64
1CADe_SIMU ....0.exe
windows10-2004-x64
1CADe_SIMU ....2.exe
windows7-x64
1CADe_SIMU ....2.exe
windows10-2004-x64
1CADe_SIMU ...2D.dll
windows7-x64
1CADe_SIMU ...2D.dll
windows10-2004-x64
1CADe_SIMU ...2D.dll
windows7-x64
1CADe_SIMU ...2D.dll
windows10-2004-x64
1CADe_SIMU ...TD.dll
windows7-x64
3CADe_SIMU ...TD.dll
windows10-2004-x64
3CADe_SIMU ...ne.dll
windows7-x64
1CADe_SIMU ...ne.dll
windows10-2004-x64
1CADe_SIMU ...de.chm
windows7-x64
1CADe_SIMU ...de.chm
windows10-2004-x64
1CADe_SIMU ...en.chm
windows7-x64
1CADe_SIMU ...en.chm
windows10-2004-x64
1CADe_SIMU ...im.exe
windows7-x64
1CADe_SIMU ...im.exe
windows10-2004-x64
1CADe_SIMU ...de.pdf
windows7-x64
1CADe_SIMU ...de.pdf
windows10-2004-x64
1CADe_SIMU ...en.pdf
windows7-x64
1CADe_SIMU ...en.pdf
windows10-2004-x64
1CADe_SIMU ...ve.dll
windows7-x64
3CADe_SIMU ...ve.dll
windows10-2004-x64
3Analysis
-
max time kernel
149s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
11-06-2024 14:51
Behavioral task
behavioral1
Sample
CADe_SIMU V4.2/CADe_SIMU_V4.0.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
CADe_SIMU V4.2/CADe_SIMU_V4.0.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
CADe_SIMU V4.2/CADe_SIMU_V4.2.exe
Resource
win7-20240215-en
Behavioral task
behavioral4
Sample
CADe_SIMU V4.2/CADe_SIMU_V4.2.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
CADe_SIMU V4.2/MFC42D.dll
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
CADe_SIMU V4.2/MFC42D.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
CADe_SIMU V4.2/MFCO42D.dll
Resource
win7-20240220-en
Behavioral task
behavioral8
Sample
CADe_SIMU V4.2/MFCO42D.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
CADe_SIMU V4.2/MSVCRTD.dll
Resource
win7-20240508-en
Behavioral task
behavioral10
Sample
CADe_SIMU V4.2/MSVCRTD.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
CADe_SIMU V4.2/Nettoplcsim-S7o-v-1-1-0-0/bin/IsoToS7online.dll
Resource
win7-20240215-en
Behavioral task
behavioral12
Sample
CADe_SIMU V4.2/Nettoplcsim-S7o-v-1-1-0-0/bin/IsoToS7online.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral13
Sample
CADe_SIMU V4.2/Nettoplcsim-S7o-v-1-1-0-0/bin/NetToPLCsim-Manual-de.chm
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
CADe_SIMU V4.2/Nettoplcsim-S7o-v-1-1-0-0/bin/NetToPLCsim-Manual-de.chm
Resource
win10v2004-20240426-en
Behavioral task
behavioral15
Sample
CADe_SIMU V4.2/Nettoplcsim-S7o-v-1-1-0-0/bin/NetToPLCsim-Manual-en.chm
Resource
win7-20240508-en
Behavioral task
behavioral16
Sample
CADe_SIMU V4.2/Nettoplcsim-S7o-v-1-1-0-0/bin/NetToPLCsim-Manual-en.chm
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
CADe_SIMU V4.2/Nettoplcsim-S7o-v-1-1-0-0/bin/NetToPLCsim.exe
Resource
win7-20240220-en
Behavioral task
behavioral18
Sample
CADe_SIMU V4.2/Nettoplcsim-S7o-v-1-1-0-0/bin/NetToPLCsim.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
CADe_SIMU V4.2/Nettoplcsim-S7o-v-1-1-0-0/doc/NetToPLCsim-Manual-de.pdf
Resource
win7-20240508-en
Behavioral task
behavioral20
Sample
CADe_SIMU V4.2/Nettoplcsim-S7o-v-1-1-0-0/doc/NetToPLCsim-Manual-de.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
CADe_SIMU V4.2/Nettoplcsim-S7o-v-1-1-0-0/doc/NetToPLCsim-Manual-en.pdf
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
CADe_SIMU V4.2/Nettoplcsim-S7o-v-1-1-0-0/doc/NetToPLCsim-Manual-en.pdf
Resource
win10v2004-20240426-en
Behavioral task
behavioral23
Sample
CADe_SIMU V4.2/libnodave.dll
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
CADe_SIMU V4.2/libnodave.dll
Resource
win10v2004-20240508-en
General
-
Target
CADe_SIMU V4.2/CADe_SIMU_V4.2.exe
-
Size
38.5MB
-
MD5
7133e92c7d8c1b965bd58ff03dd743f6
-
SHA1
65f34de74e4c0f1e8fd9e400ed9b698a8309ba35
-
SHA256
07df299e6892c2f1b6a66d19f96b1dce13523ced14d4f7807076f730680a4ffd
-
SHA512
e436f744a3f50d6e26b18e50e4d26c12041ed786f139a926af872e2327313e07e664d948a612e74679b1c84667d2fe84dae8c63f54d09881b98b36706b0f35b3
-
SSDEEP
786432:Ye4/h7VnUwS30aW3/BYQe4WlW76QZcL7nIs4B3H2MPs4+lI6pRT87MlUPEBkY9ei:Ye4/hdUwfdX6ys4B3H2MPs4+lI6pRT8i
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 540 CADe_SIMU_V4.2.exe 540 CADe_SIMU_V4.2.exe