Overview
overview
4Static
static
3Mercedes-B...al.rar
windows10-2004-x64
3mercedes_e...un.exe
windows10-2004-x64
1mercedes_e...lp.cnt
windows10-2004-x64
3mercedes_e...lp.hlp
windows10-2004-x64
4mercedes_e...ce.dat
windows10-2004-x64
3mercedes_e...ev.dhl
windows10-2004-x64
3mercedes_e..._2.txt
windows10-2004-x64
1mercedes_e...un.inf
windows10-2004-x64
1mercedes_e...lt.jpg
windows10-2004-x64
3mercedes_e...lt.txt
windows10-2004-x64
1Analysis
-
max time kernel
94s -
max time network
105s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
03/06/2023, 20:17
Static task
static1
Behavioral task
behavioral1
Sample
Mercedes-Benz W124 1985-1995 Service Manual.rar
Resource
win10v2004-20230220-en
Behavioral task
behavioral2
Sample
mercedes_e_class_w124_1985_1995_mult/Run/Run.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
mercedes_e_class_w124_1985_1995_mult/Run/help.cnt
Resource
win10v2004-20230220-en
Behavioral task
behavioral4
Sample
mercedes_e_class_w124_1985_1995_mult/Run/help.hlp
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
mercedes_e_class_w124_1985_1995_mult/Run/interface.dat
Resource
win10v2004-20230220-en
Behavioral task
behavioral6
Sample
mercedes_e_class_w124_1985_1995_mult/Run/mev.dhl
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
mercedes_e_class_w124_1985_1995_mult/W124_2.txt
Resource
win10v2004-20230220-en
Behavioral task
behavioral8
Sample
mercedes_e_class_w124_1985_1995_mult/autorun.inf
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
mercedes_e_class_w124_1985_1995_mult/mercedes_e_class_w124_1985_1995_mult.jpg
Resource
win10v2004-20230220-en
Behavioral task
behavioral10
Sample
mercedes_e_class_w124_1985_1995_mult/mercedes_e_class_w124_1985_1995_mult.txt
Resource
win10v2004-20230220-en
General
-
Target
mercedes_e_class_w124_1985_1995_mult/mercedes_e_class_w124_1985_1995_mult.txt
-
Size
533B
-
MD5
e10bdc866d52a438f29903714f9799d3
-
SHA1
610754d7323496ca98e86ce920c170553a65eeba
-
SHA256
4295c3e233d3d154675a141a1a6a5318b7999a6fb6e4e304e5bfd4533293dfc6
-
SHA512
c91b25f5a6c6c360cb74dd115ef8bc9a0c6b319299c8da6cdf08d2940cf198146a729ab186d9d406333531165a1fc1d3c34b7d4b46a9e7a14ae76d290916da59
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 4396 NOTEPAD.EXE