Resubmissions

23/07/2024, 10:59

240723-m3xmhashqj 4

23/07/2024, 10:58

240723-m2vrhsscle 5

23/07/2024, 10:55

240723-m1kj6asbpf 5

General

  • Target

    MapUpdateToolbox-inst.exe

  • Size

    71.7MB

  • MD5

    8919bf1e343fdde2a24e69fade1c46c1

  • SHA1

    3c7d3aea753f69baecc6a46847c39e36bf2dffa0

  • SHA256

    90db595535f253e85264d6cf38ca1aca2f961e3e8af917346e59f8b8dc913825

  • SHA512

    206051c632c1407158e5c44ccc81fb6749762499f9e15eb4f24c8713f87cd4b74b518f93371f28c60a6089ab1872bafeabe373a524b6fe79423a1ce6c3081848

  • SSDEEP

    1572864:gkSNkNZpoYGCkRXiBO13f39coS5Y7yX2YYEYJImA9jMfGmEmR/Vi7oECmSBxcK:gkSNsZ6seXiBO1vCN5/2YYEY+JlMfFnl

Score
3/10

Malware Config

Signatures

  • Unsigned PE 18 IoCs

    Checks for missing Authenticode signature.

Files

  • MapUpdateToolbox-inst.exe
    .exe windows:4 windows x86 arch:x86

    6e7f9a29f2c85394521a08b9f31f6275


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    3e8d18bb71c7ebbda2ddc2a4bb03547b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    5e62e8e248e7364886b604bd1fcf4c13


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • MapUpdateToolbox-uninst.exe
    .exe windows:4 windows x86 arch:x86

    6e7f9a29f2c85394521a08b9f31f6275


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    5e62e8e248e7364886b604bd1fcf4c13


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • MapUpdateToolbox.exe
    .exe windows:6 windows x86 arch:x86

    e330bea2aa070facd25b91d8145e0221


    Code Sign

    Headers

    Imports

    Sections

  • cef.pak
  • cef_100_percent.pak
    .js
  • cef_200_percent.pak
    .js
  • cef_extensions.pak
    .js
  • cef_helper.exe
    .exe windows:6 windows x86 arch:x86

    d64d1cbb7ad941ae7a60bff08b7a6e15


    Code Sign

    Headers

    Imports

    Sections

  • chrome_elf.dll
    .dll windows:5 windows x86 arch:x86

    b9365694071950b856f10411aab6cba0


    Headers

    Imports

    Exports

    Sections

  • d3dcompiler_47.dll
    .dll windows:10 windows x86 arch:x86

    0f31485cd3d6d36b416b744fa9701f28


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • devtools_resources.pak
  • icudtl.dat
  • libEGL.dll
    .dll windows:5 windows x86 arch:x86

    ecadf61e50ed499e76a9b050ab8fff13


    Headers

    Imports

    Exports

    Sections

  • libGLESv2.dll
    .dll windows:5 windows x86 arch:x86

    c1f02dfa8cb0debc3bac67ec66c140f3


    Headers

    Imports

    Exports

    Sections

  • libcef.dll
    .dll windows:5 windows x86 arch:x86

    d039a44f980c820ee10934f281838eed


    Headers

    Imports

    Exports

    Sections

  • libcrypto-1_1.dll
    .dll windows:6 windows x86 arch:x86

    8c0767be991db4f5e9bd67fff379c857


    Headers

    Imports

    Exports

    Sections

  • libssl-1_1.dll
    .dll windows:6 windows x86 arch:x86

    a081803d8011fe54408f59e029822033


    Headers

    Imports

    Exports

    Sections

  • license/Visteon_ToolboxAgent_win.lyc
  • locales/am.pak
  • locales/ar.pak
  • locales/bg.pak
  • locales/bn.pak
  • locales/ca.pak
  • locales/cs.pak
  • locales/da.pak
  • locales/de.pak
  • locales/el.pak
  • locales/en-GB.pak
  • locales/en-US.pak
  • locales/es-419.pak
  • locales/es.pak
  • locales/et.pak
  • locales/fa.pak
  • locales/fi.pak
  • locales/fil.pak
  • locales/fr.pak
  • locales/gu.pak
  • locales/he.pak
  • locales/hi.pak
  • locales/hr.pak
  • locales/hu.pak
  • locales/id.pak
  • locales/it.pak
  • locales/ja.pak
  • locales/kn.pak
  • locales/ko.pak
  • locales/lt.pak
  • locales/lv.pak
  • locales/ml.pak
  • locales/mr.pak
  • locales/ms.pak
  • locales/nb.pak
  • locales/nl.pak
  • locales/pl.pak
  • locales/pt-BR.pak
  • locales/pt-PT.pak
  • locales/ro.pak
  • locales/ru.pak
  • locales/sk.pak
  • locales/sl.pak
  • locales/sr.pak
  • locales/sv.pak
  • locales/sw.pak
  • locales/ta.pak
  • locales/te.pak
  • locales/th.pak
  • locales/tr.pak
  • locales/uk.pak
  • locales/vi.pak
  • locales/zh-CN.pak
  • locales/zh-TW.pak
  • msvcr120.dll
    .dll windows:6 windows x86 arch:x86

    aa8d086deb6960b10f8791df466a5610


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • mtp.dll
    .dll windows:6 windows x86 arch:x86

    d1f04ba15bdf5b2446e3d21a2c336647


    Headers

    Imports

    Exports

    Sections

  • nngine.dll
    .dll windows:6 windows x86 arch:x86

    61a0f1640f6d558ba97af8256406afe5


    Headers

    Imports

    Exports

    Sections

  • plugin.dll
    .dll windows:6 windows x86 arch:x86

    12d25cddde8c4943e2a5758893cee804


    Headers

    Imports

    Exports

    Sections

  • resources/offline/de/blacklisted.html
    .html .js polyglot
  • resources/offline/de/connecting.html
    .html .js polyglot
  • resources/offline/de/error.html
    .html .js polyglot
  • resources/offline/de/eula.html
    .html .js polyglot
  • resources/offline/de/installing.html
    .html .js polyglot
  • resources/offline/de/tryagain.html
    .html .js polyglot
  • resources/offline/en/blacklisted.html
    .html .js polyglot
  • resources/offline/en/connecting.html
    .html .js polyglot
  • resources/offline/en/error.html
    .html .js polyglot
  • resources/offline/en/eula.html
    .html .js polyglot
  • resources/offline/en/installing.html
    .html .js polyglot
  • resources/offline/en/tryagain.html
    .html .js polyglot
  • resources/offline/es/blacklisted.html
    .html .js polyglot
  • resources/offline/es/connecting.html
    .html .js polyglot
  • resources/offline/es/error.html
    .html .js polyglot
  • resources/offline/es/eula.html
    .html .js polyglot
  • resources/offline/es/installing.html
    .html .js polyglot
  • resources/offline/es/tryagain.html
    .html .js polyglot
  • resources/offline/files/OpenSans-Light.ttf
    .html
  • resources/offline/files/default.css
  • resources/offline/files/fonts.css
  • resources/offline/files/jquery-1.12.4.min.js
    .js
  • resources/offline/files/jquery.selectbox.css
  • resources/offline/files/jquery.selectbox.min.js
    .js
  • resources/offline/files/mazda-visteon-common.css
  • resources/offline/files/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkaVc.ttf
  • resources/offline/files/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0RkyFjaVc.ttf
  • resources/offline/files/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsg-1y4n.ttf
  • resources/offline/files/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsiH0C4n.ttf
  • resources/offline/files/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0C4n.ttf
  • resources/offline/files/overlay.css
  • resources/offline/files/parts/backbutton.png
    .png
  • resources/offline/files/parts/header-logo.png
    .png
  • resources/offline/files/parts/hhelp.png
    .png
  • resources/offline/files/parts/hlanguage.png
    .png
  • resources/offline/files/parts/preloader.svg
  • resources/offline/files/supermarket_common.js
    .js
  • resources/offline/files/tb-sizes.css
  • resources/offline/files/tb.css
  • resources/offline/files/unify.css
  • resources/offline/fr/blacklisted.html
    .html .js polyglot
  • resources/offline/fr/connecting.html
    .html .js polyglot
  • resources/offline/fr/error.html
    .html .js polyglot
  • resources/offline/fr/eula.html
    .html .js polyglot
  • resources/offline/fr/installing.html
    .html .js polyglot
  • resources/offline/fr/tryagain.html
    .html .js polyglot
  • resources/offline/it/blacklisted.html
    .html .js polyglot
  • resources/offline/it/connecting.html
    .html .js polyglot
  • resources/offline/it/error.html
    .html .js polyglot
  • resources/offline/it/eula.html
    .html .js polyglot
  • resources/offline/it/installing.html
    .html .js polyglot
  • resources/offline/it/tryagain.html
    .html .js polyglot
  • resources/offline/lang/lang_de.ini
  • resources/offline/lang/lang_en.ini
  • resources/offline/lang/lang_es.ini
  • resources/offline/lang/lang_fr.ini
  • resources/offline/lang/lang_hu.ini
  • resources/offline/lang/lang_it.ini
  • resources/offline/lang/lang_nl.ini
  • resources/offline/lang/lang_pl.ini
  • resources/offline/lang/lang_pt.ini
  • resources/offline/lang/lang_ru.ini
  • resources/offline/lang/lang_tr.ini
  • resources/offline/nl/blacklisted.html
    .html .js polyglot
  • resources/offline/nl/connecting.html
    .html .js polyglot
  • resources/offline/nl/error.html
    .html .js polyglot
  • resources/offline/nl/eula.html
    .html .js polyglot
  • resources/offline/nl/installing.html
    .html .js polyglot
  • resources/offline/nl/tryagain.html
    .html .js polyglot
  • resources/offline/pt/blacklisted.html
    .html .js polyglot
  • resources/offline/pt/connecting.html
    .html .js polyglot
  • resources/offline/pt/error.html
    .html .js polyglot
  • resources/offline/pt/eula.html
    .html .js polyglot
  • resources/offline/pt/installing.html
    .html .js polyglot
  • resources/offline/pt/tryagain.html
    .html .js polyglot
  • snapshot_blob.bin
  • swiftshader/libEGL.dll
    .dll windows:5 windows x86 arch:x86

    b7c0ca2c7eadf6e169e6d987180f93a8


    Headers

    Imports

    Exports

    Sections

  • swiftshader/libGLESv2.dll
    .dll windows:5 windows x86 arch:x86

    64f8f339a7a459ee03ede6de8be2834d


    Headers

    Imports

    Exports

    Sections

  • v8_context_snapshot.bin