Analysis

  • max time kernel
    72s
  • max time network
    88s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/06/2023, 20:17

General

  • Target

    mercedes_e_class_w124_1985_1995_mult/Run/Run.exe

  • Size

    1.6MB

  • MD5

    edc207bdc8b457888b8e928094dfb7d8

  • SHA1

    11527457905c79a708c6e64778431f1a8d0b53ad

  • SHA256

    6953e7e519f5fd112b9298179efd3e1b4a027bbfdbf2b6266c4d996d26034e56

  • SHA512

    e6315dfb318967052cd4eb641a8d15a851281311d15547d9a6cb9aa9a709f8b87fd20b0d4d9ef21bec7c8a928ff3a8525640ded690d23f00a5a1738e0f6a7268

  • SSDEEP

    24576:hQbhe2ZrBW5AIA5k+V/7DUvHiFOIHnbozwnrR5apkIB8992Yr3JCVV6Npu75:hN4+8FUqHHbVrPa2IB8nZJS/l

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\mercedes_e_class_w124_1985_1995_mult\Run\Run.exe
    "C:\Users\Admin\AppData\Local\Temp\mercedes_e_class_w124_1985_1995_mult\Run\Run.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    PID:3732

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3732-133-0x0000000002420000-0x0000000002421000-memory.dmp

    Filesize

    4KB

  • memory/3732-134-0x0000000000400000-0x0000000000595000-memory.dmp

    Filesize

    1.6MB

  • memory/3732-135-0x0000000000400000-0x0000000000595000-memory.dmp

    Filesize

    1.6MB

  • memory/3732-136-0x0000000000400000-0x0000000000595000-memory.dmp

    Filesize

    1.6MB

  • memory/3732-137-0x0000000000400000-0x0000000000595000-memory.dmp

    Filesize

    1.6MB

  • memory/3732-138-0x0000000000400000-0x0000000000595000-memory.dmp

    Filesize

    1.6MB

  • memory/3732-139-0x0000000000400000-0x0000000000595000-memory.dmp

    Filesize

    1.6MB

  • memory/3732-140-0x0000000000400000-0x0000000000595000-memory.dmp

    Filesize

    1.6MB