a0d456125b37fe245b18fd7d276c6fa98ed62b18242a91f15ec4e868c400dd27

Sharing

Copy URL Twitter E-mail

General

Target
a0d456125b37fe245b18fd7d276c6fa98ed62b18242a91f15ec4e868c400dd27
Size 12.0MB
Sample260825-mljpbazhka
SHA256 a0d456125b37fe245b18fd7d276c6fa98ed62b18242a91f15ec4e868c400dd27
MD5 94b1d2b54b0963db5464899acbedc670
SHA1 2a57c505c71eb8bd457e3751f2801ac7f4a4db1d
SHA512 4d419f30a261d0fe69451a92798c7b99d7fb8226a7d7e1c683d531ebd99b9edaf8b3cb17176ba2ab037175b35134227188c216aeb9fa20b1b17e49c395e28bef
SSDEEP 196608:FEXi3jCTSI8H5iJ7YblgirWsn0OXuoJNidZQrgBCO5BelirsjWYqC5U21HDgrNcL:FEXi3jIMkJ7YblgirWsn0iuoJNidKrgQ
TLSH
T1F3C633CBFBAF51D6F62DDC3D812188E6A7519017C530F0AF1AB4AE7190239E8E14DE91
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Targets

- Target
  02-在线升级上位机CAN2EU、CAN2+/在线升级上位机CAN2EU、CAN2+/SystemUpdateTools/CAN232.dll
- Size 52KB
- SHA256 c227356236c00f56986aafe89f3550102d2194b4023d54bceedfc6ace80165fa
- MD5 049b94761269f36b002a45b6945f349c
- SHA1 25ec7dcf237e01bd3c56cb8deb9e5af0cb6fa117
- SHA512 61d77d373f91faaa65d0f0161b557ca6ec7cff97cd3a8b456fe0c5fdb43430a201c7ae310b24f0ce099c4d130c09a9419499c13573ca7ddd405079c4f2da37d5
- SSDEEP 768:ty/jRJzuFNm7gx4mdTbD0HKCc4PmzDOFT2LVeugoq:AjC4gxRTbQJc4mh+oq
- TLSH
  T10B338E213A8145F3C749B03994E96B3F8ABD76491BD05403AFF2DA5D6E32962B13E307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  02-在线升级上位机CAN2EU、CAN2+/在线升级上位机CAN2EU、CAN2+/SystemUpdateTools/CANETE.dll
- Size 140KB
- SHA256 f3414def11e926d88cac40c450edce3876d0b7df01856b4fab37b4bb97cbd030
- MD5 631fafcb2074b338fa508706b033df48
- SHA1 ec5456a3c90f862218c5038ca810339e3e3d9866
- SHA512 3a5d7a4090f3328b90d379d4fb3abf3ef66bec3924b3b5b475cf81908d554fe2b251a2c9c2ccee68249eb247105448ed391df6546ac1008c87bd6af5a715bc06
- SSDEEP 3072:ZTN62vMJDElbfpK3IE51DA5nTFbohZt7plb:XlbBK4EAnRm7
- TLSH
  T1D4E38F123191C0F6C29D553D19626B3A937BE560CEE24E079F60FFCC1E716968F2A263
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  02-在线升级上位机CAN2EU、CAN2+/在线升级上位机CAN2EU、CAN2+/SystemUpdateTools/CANET_TCP.dll
- Size 208KB
- SHA256 d438aad51010b70c9eaae35e8c173742eb435b5aa2a4a1436864f1a076bb4d98
- MD5 5d6a23b0d571deb1c405f25b7969d0d5
- SHA1 46890773256d2428045ff247631a0e707766f27f
- SHA512 3d3ccdbfcde913464d52f7662a38c9b7e2fbe49b3443a9fe0141cbb196192cd6738012364fe6b1f3a5075eb56fa31520a4d286f0f9e74889a3648d21fa46d6c3
- SSDEEP 3072:rsj6z2vMJD89DIARc64MV3pYzE9uMGPqLBfzwi9wNgoCZttgPag8LilY:rU9D5c6vV3pAE85FP2tgPnY
- TLSH
  T18F24AE027191C0B6D35F02344DA7AF3BB7BCED908F929A878390DE4D5E325959E3A217
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  02-在线升级上位机CAN2EU、CAN2+/在线升级上位机CAN2EU、CAN2+/SystemUpdateTools/CanDemo_dbg.exe
- Size 816KB
- SHA256 ea323d6b3a1c9d50cf48b02cde39c18cdbc85c8ffe6fe15124a7030e5bd76035
- MD5 84cc19b4186fddab07fbc9174bbfef14
- SHA1 710ee202099e54d270e436e3a71192b73b71b080
- SHA512 b50cd88aeafc0c50812ce71ed2b6130f23f4b3d0249f7b756af664bb82cd1fcf4d0fc1ab950cd0103b4643983707f6a7f5818dfc7d0e20700d31b438243785e0
- SSDEEP 12288:zH6izP4a590OZBnVtZa7dtb45feLzFrXo:D6iL4MLrVtZa7dtb45feLzFrY
- TLSH
  T1DD05D663F6A6FBE9C392F17E9D514A78086D280078064E4FF19C364BEEF5461BF0A116
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  02-在线升级上位机CAN2EU、CAN2+/在线升级上位机CAN2EU、CAN2+/SystemUpdateTools/ControlCAN.dll
- Size 52KB
- SHA256 117e157cd972a6617a4c023e782a25f4dc5a3cdbc4b8763d3a18f6378ee2cf77
- MD5 e6608e4e8e06742fe947411c2d26522f
- SHA1 c6b20a701c274629a3acbb260894b35375174cc1
- SHA512 bc34a05b52e06bcbc4ddb3b0c796d11d44a4be9f14748a465961dffe314288a610be7b9067f0ad07b3546e3e96fb7a92055b16ecefbb8a0ff769074f280f7524
- SSDEEP 768:fRbnDCcQvTx7LuFM7dE/QQqqupSSRTYDoq/:51QvTx7Cq7G/QJLioq
- TLSH
  T1E0337D34756284F3E1898A7D35995B3F8F7D6D520EE148438F765D492E32AE0B33A306
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  02-在线升级上位机CAN2EU、CAN2+/在线升级上位机CAN2EU、CAN2+/SystemUpdateTools/cvibuild.CanDemo/Debug/CanDemo_dbg.exe
- Size 816KB
- SHA256 ea323d6b3a1c9d50cf48b02cde39c18cdbc85c8ffe6fe15124a7030e5bd76035
- MD5 84cc19b4186fddab07fbc9174bbfef14
- SHA1 710ee202099e54d270e436e3a71192b73b71b080
- SHA512 b50cd88aeafc0c50812ce71ed2b6130f23f4b3d0249f7b756af664bb82cd1fcf4d0fc1ab950cd0103b4643983707f6a7f5818dfc7d0e20700d31b438243785e0
- SSDEEP 12288:zH6izP4a590OZBnVtZa7dtb45feLzFrXo:D6iL4MLrVtZa7dtb45feLzFrY
- TLSH
  T1DD05D663F6A6FBE9C392F17E9D514A78086D280078064E4FF19C364BEEF5461BF0A116
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  02-在线升级上位机CAN2EU、CAN2+/在线升级上位机CAN2EU、CAN2+/SystemUpdateTools/cvibuild.CanDemo/Debug/ControlCAN.dll
- Size 52KB
- SHA256 117e157cd972a6617a4c023e782a25f4dc5a3cdbc4b8763d3a18f6378ee2cf77
- MD5 e6608e4e8e06742fe947411c2d26522f
- SHA1 c6b20a701c274629a3acbb260894b35375174cc1
- SHA512 bc34a05b52e06bcbc4ddb3b0c796d11d44a4be9f14748a465961dffe314288a610be7b9067f0ad07b3546e3e96fb7a92055b16ecefbb8a0ff769074f280f7524
- SSDEEP 768:fRbnDCcQvTx7LuFM7dE/QQqqupSSRTYDoq/:51QvTx7Cq7G/QJLioq
- TLSH
  T1E0337D34756284F3E1898A7D35995B3F8F7D6D520EE148438F765D492E32AE0B33A306
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  02-在线升级上位机CAN2EU、CAN2+/在线升级上位机CAN2EU、CAN2+/SystemUpdateTools/cvibuild.CanDemo/Debug/kerneldlls/CAN232.dll
- Size 52KB
- SHA256 c227356236c00f56986aafe89f3550102d2194b4023d54bceedfc6ace80165fa
- MD5 049b94761269f36b002a45b6945f349c
- SHA1 25ec7dcf237e01bd3c56cb8deb9e5af0cb6fa117
- SHA512 61d77d373f91faaa65d0f0161b557ca6ec7cff97cd3a8b456fe0c5fdb43430a201c7ae310b24f0ce099c4d130c09a9419499c13573ca7ddd405079c4f2da37d5
- SSDEEP 768:ty/jRJzuFNm7gx4mdTbD0HKCc4PmzDOFT2LVeugoq:AjC4gxRTbQJc4mh+oq
- TLSH
  T10B338E213A8145F3C749B03994E96B3F8ABD76491BD05403AFF2DA5D6E32962B13E307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  02-在线升级上位机CAN2EU、CAN2+/在线升级上位机CAN2EU、CAN2+/SystemUpdateTools/cvibuild.CanDemo/Debug/kerneldlls/CANETE.dll
- Size 140KB
- SHA256 f3414def11e926d88cac40c450edce3876d0b7df01856b4fab37b4bb97cbd030
- MD5 631fafcb2074b338fa508706b033df48
- SHA1 ec5456a3c90f862218c5038ca810339e3e3d9866
- SHA512 3a5d7a4090f3328b90d379d4fb3abf3ef66bec3924b3b5b475cf81908d554fe2b251a2c9c2ccee68249eb247105448ed391df6546ac1008c87bd6af5a715bc06
- SSDEEP 3072:ZTN62vMJDElbfpK3IE51DA5nTFbohZt7plb:XlbBK4EAnRm7
- TLSH
  T1D4E38F123191C0F6C29D553D19626B3A937BE560CEE24E079F60FFCC1E716968F2A263
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  02-在线升级上位机CAN2EU、CAN2+/在线升级上位机CAN2EU、CAN2+/SystemUpdateTools/cvibuild.CanDemo/Debug/kerneldlls/CANET_TCP.dll
- Size 208KB
- SHA256 d438aad51010b70c9eaae35e8c173742eb435b5aa2a4a1436864f1a076bb4d98
- MD5 5d6a23b0d571deb1c405f25b7969d0d5
- SHA1 46890773256d2428045ff247631a0e707766f27f
- SHA512 3d3ccdbfcde913464d52f7662a38c9b7e2fbe49b3443a9fe0141cbb196192cd6738012364fe6b1f3a5075eb56fa31520a4d286f0f9e74889a3648d21fa46d6c3
- SSDEEP 3072:rsj6z2vMJD89DIARc64MV3pYzE9uMGPqLBfzwi9wNgoCZttgPag8LilY:rU9D5c6vV3pAE85FP2tgPnY
- TLSH
  T18F24AE027191C0B6D35F02344DA7AF3BB7BCED908F929A878390DE4D5E325959E3A217
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  02-在线升级上位机CAN2EU、CAN2+/在线升级上位机CAN2EU、CAN2+/SystemUpdateTools/cvibuild.CanDemo/Debug/kerneldlls/PC104C2.dll
- Size 44KB
- SHA256 4aa58a2b2939030c265748ccc33a9ecaa03e12daa4eab819e853861f4534e480
- MD5 0cf77f57bfbc84749fa5125106f38626
- SHA1 bd0c95664d0bc3a90029bed7c38c2ad83610b180
- SHA512 e8c9603828666ef12bf7955963abdd1351f8da3d456d053e9a944bfd216dbf4f3cc78b9e4986995df359c4073b808b6db51d5f56a43b680e12ed8c6b9758c661
- SSDEEP 768:OCqIJw3gDb95cQY4hTFP1SubFoRhOy//BxIsoOwH1Yo:OlIyCbrTFNSuFShRhoXHSo
- TLSH
  T172137C207A9144F3E1D7863525E59B3B8B7EBE500BE288C39F76488A2D31490F53F396
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  02-在线升级上位机CAN2EU、CAN2+/在线升级上位机CAN2EU、CAN2+/SystemUpdateTools/cvibuild.CanDemo/Debug/kerneldlls/PC104CAN.dll
- Size 56KB
- SHA256 5d73a791ae10e716056487871ee8ed05c7c46c34cf8b9da13beebe1e1189a8f1
- MD5 24385b9d4f583b1407870fc1810bccb4
- SHA1 18749afde47900b9002043798f1374d5869346e1
- SHA512 ce69c0d45f51a56729ac1e2afc529a7d40d984b974c8743817bd6cd6ad2745238526a8a87a6ff85638f901c5282a370910d1f6aa72218990fd48259338ec1bac
- SSDEEP 768:syZxMe+QOFudymKOz1Be4638yJJFAfAVjLJ463jIUkQltNUK2P:smt+AdNBe4FyJJef4jLJ4ucUzlfUd
- TLSH
  T1EB438C21B7A281F2D58F557D04DA4B4A9B7BBC0007F891474F2906DFEA722A0F73A316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  02-在线升级上位机CAN2EU、CAN2+/在线升级上位机CAN2EU、CAN2+/SystemUpdateTools/cvibuild.CanDemo/Debug/kerneldlls/PCI5121.dll
- Size 52KB
- SHA256 e6bef8aa1115ea0579b84417f5b1583a0600438572fb0e243083875fe15c5c33
- MD5 fed65a6b627ce41353fa34e180484fc8
- SHA1 4c99da7c913d0f2a030d55675fcf57e49198d77f
- SHA512 890e007223ce590ad3f618f2de312898bae3b86f8c2ad57241748be60cf5fbe7bf952bddf65fc893b05687327ae96362e1e18ded72f67842c7f223736bf1b9af
- SSDEEP 768:O7Xz+ocAmZ+zn0JWGRlTKS2gdphbPmC58yN4G8omPh:O7Xz+Kzn0JWGRlTKSVhbPL1Aom
- TLSH
  T1CC336BA175D080F2FA6B413511E61736AA3A2A5202D86D5BCFF7EAC71C331A1F12E347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  02-在线升级上位机CAN2EU、CAN2+/在线升级上位机CAN2EU、CAN2+/SystemUpdateTools/cvibuild.CanDemo/Debug/kerneldlls/gisadll.dll
- Size 40KB
- SHA256 5ad94c98118d8a97f27b84c8e50c911904a6debf1af4f82c24b9251ed0f2c57d
- MD5 415ceb18b811f011229bba9b92b4ca3f
- SHA1 8ecf98f8adafbbc24f8f47fda94c8a8660fc9eca
- SHA512 6eb2a3bbf3807981750458f8357cd2abc43741ca6834c27fcf01c4f10194a14116e330253b17dcc593e4610dd8e7f39a88ed53915b418797376b289b80e3faef
- SSDEEP 384:ZygPtQ/E+uiwKmHgRKnuTJrxTKdrrcvGcmlP9o4dFymYUA43iu2p0o+qi/g8Wmgu:YgPtymHglT9xTKmvOdFtnRW0onvm
- TLSH
  T1D0035B2268A641B3D39A403115665F3BAE3E5F102FA015C387F39C77AD36DA0A52B30B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  02-在线升级上位机CAN2EU、CAN2+/在线升级上位机CAN2EU、CAN2+/SystemUpdateTools/cvibuild.CanDemo/Debug/kerneldlls/gpcidll.dll
- Size 40KB
- SHA256 2a46f9fbcb4dd96e69d8d057d569e47af642a0d382abad2745b4d83564643bf1
- MD5 2fc5146033fc0d3404c1d3b6db0b5e39
- SHA1 6f40439139b7a06ed6a1af41c1af72f8dc36c2d0
- SHA512 277b20780d022d57abcff489ba652d0dc4b1dc3d33f044e612d61150e1bbe38d66a5e38015f2d5fed00f8814a6fbcf3c3cb2488096294aedb0c8ae19eaedac29
- SSDEEP 384:RYX5wgE9uJ/vZ75T7UROnuPVrhTKdrrcvGcmlP9oRodFyKcGs43iu2p0onqi/ggs:RYXvT7UpP5hTKmv7odFvzRW0oqc
- TLSH
  T1B9035C2268E501B7E3DA003119566F3BAE3E5E102BF4058397F79873AD75DA0A53B31B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  02-在线升级上位机CAN2EU、CAN2+/在线升级上位机CAN2EU、CAN2+/SystemUpdateTools/cvibuild.CanDemo/Debug/kerneldlls/isa5420.dll
- Size 44KB
- SHA256 d92415df07bd134677c231fab20c943c9cb56120f04787595361576195b9360c
- MD5 d9f9725e697f003ac1b5cd46acf5cc25
- SHA1 29ed1d475f4b59610ec2022cebaab45b720e9b2f
- SHA512 46c16c29b0e89c6dd6d274d55ebdaa9a59a9af345e5c623052ef81a46521ddf075f84b918aa85acbe846ee019a8ebc15686518fa7b704c0b3d404b4c67dba72d
- SSDEEP 768:75KtjqqFj0oNefS4Y5PFC7cTVczn0JWscTWEukhVDa7WaojscYrsu:75Kt+qFj04efS44PFC7cTVczn0JWscTD
- TLSH
  T1AC137C9036D104F3E206A07662EB377B6A7F6BA650E02D6B4776FE851933142B21F347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32