Overview
overview
7Static
static
7Progisp v1...IO.sys
windows10-2004-x64
3Progisp v1...sp.exe
windows10-2004-x64
3Progisp v1...b0.dll
windows10-2004-x64
3Progisp v1...b0.dll
windows10-2004-x64
3Progisp v1...b0.dll
windows10-2004-x64
3Progisp v1...b0.dll
windows10-2004-x64
3Progisp v1...64.dll
windows10-2004-x64
1Progisp v1...64.sys
windows10-2004-x64
3Progisp v1...in.exe
windows10-2004-x64
3Progisp v1...sb.exe
windows10-2004-x64
3USBASP_write_0x44.cmd
windows10-2004-x64
3USBASP_write_0x46.cmd
windows10-2004-x64
3VAGCOM_EEW...ng.exe
windows10-2004-x64
3VAGCOM_HWType.exe
windows10-2004-x64
3VCDSLoader.exe
windows10-2004-x64
3_README.pdf
windows10-2004-x64
3ftd2xx.dll
windows10-2004-x64
3Analysis
- max time kernel
298s - max time network
288s - platform
windows10-2004_x64 - resource
win10v2004-20260513-es - resource tags
arch:x64arch:x86image:win10v2004-20260513-eslocale:es-esos:windows10-2004-x64systemwindows - submitted
04/09/2026, 21:33
Behavioral task
behavioral1
Sample
Progisp v1.72/GIVEIO.sys
Resource
win10v2004-20260513-es
Behavioral task
behavioral2
Sample
Progisp v1.72/progisp.exe
Resource
win10v2004-20260513-es
Behavioral task
behavioral3
Sample
Progisp v1.72/win-driver/libusb_0.1.10.1/libusb0.dll
Resource
win10v2004-20260513-es
Behavioral task
behavioral4
Sample
Progisp v1.72/win-driver/libusb_0.1.10.1/libusb0.dll
Resource
win10v2004-20260513-es
Behavioral task
behavioral5
Sample
Progisp v1.72/win-driver/libusb_0.1.12.1/libusb0.dll
Resource
win10v2004-20260513-es
Behavioral task
behavioral6
Sample
Progisp v1.72/win-driver/libusb_0.1.12.1/libusb0.dll
Resource
win10v2004-20260513-es
Behavioral task
behavioral7
Sample
Progisp v1.72/win-driver/libusb_0.1.12.1/libusb0_x64.dll
Resource
win10v2004-20260513-es
Behavioral task
behavioral8
Sample
Progisp v1.72/win-driver/libusb_0.1.12.1/libusb0_x64.sys
Resource
win10v2004-20260513-es
Behavioral task
behavioral9
Sample
Progisp v1.72/win-driver/libusb_0.1.12.1/testlibusb-win.exe
Resource
win10v2004-20260513-es
Behavioral task
behavioral10
Sample
Progisp v1.72/win-driver/libusb_0.1.12.1/testlibusb.exe
Resource
win10v2004-20260513-es
Behavioral task
behavioral11
Sample
USBASP_write_0x44.cmd
Resource
win10v2004-20260513-es
Behavioral task
behavioral12
Sample
USBASP_write_0x46.cmd
Resource
win10v2004-20260513-es
Behavioral task
behavioral13
Sample
VAGCOM_EEWriteLang.exe
Resource
win10v2004-20260513-es
Behavioral task
behavioral14
Sample
VAGCOM_HWType.exe
Resource
win10v2004-20260513-es
Behavioral task
behavioral15
Sample
VCDSLoader.exe
Resource
win10v2004-20260513-es
Behavioral task
behavioral16
Sample
_README.pdf
Resource
win10v2004-20260513-es
Behavioral task
behavioral17
Sample
ftd2xx.dll
Resource
win10v2004-20260513-es
General
- Target VCDSLoader.exe
- Size 2.6MB
- Sample260904-1ect3s1cnd
- SHA256 8f661f16c87169fefc4dc7e612521ad8498c016a0153c51dae67af0b984adaac
- MD5 a1e2879a10d20f2b72cb94204a2c1e9f
- SHA1 da46a17c6cac86e34b0134e32ef0074b538e6a0d
- SHA512 1bcd89994938b2be245e48489f60eac3f1f4a16a2fda1599005e55831f9e982c5107952fcf54ff5b556f2bc51ef2f06c4d674bb50deeff34fe222bdaa145e16b
- SSDEEP 49152:KE5ZT77/MV2zSKgMcL/ULrPOKB/HHrjfeBnwmtF7M3XVWfttR9fsQh6DpjGehfyY:tTvSKgMcL/+rPzB/HHffSPb7cXIf3RFu
- TLSH T143C512E97B519550D840CBB69027DFDA601EEDE13E78FA7A1866F6224F732F148031CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language VCDSLoader.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 1924 VCDSLoader.exe 1924 VCDSLoader.exe