Overview
overview
4Static
static
3Mercedes-B...al.rar
windows10-2004-x64
3mercedes_e...un.exe
windows10-2004-x64
1mercedes_e...lp.cnt
windows10-2004-x64
3mercedes_e...lp.hlp
windows10-2004-x64
4mercedes_e...ce.dat
windows10-2004-x64
3mercedes_e...ev.dhl
windows10-2004-x64
3mercedes_e..._2.txt
windows10-2004-x64
1mercedes_e...un.inf
windows10-2004-x64
1mercedes_e...lt.jpg
windows10-2004-x64
3mercedes_e...lt.txt
windows10-2004-x64
1Analysis
-
max time kernel
88s -
max time network
101s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
03-06-2023 20:17
Static task
static1
Behavioral task
behavioral1
Sample
Mercedes-Benz W124 1985-1995 Service Manual.rar
Resource
win10v2004-20230220-en
Behavioral task
behavioral2
Sample
mercedes_e_class_w124_1985_1995_mult/Run/Run.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
mercedes_e_class_w124_1985_1995_mult/Run/help.cnt
Resource
win10v2004-20230220-en
Behavioral task
behavioral4
Sample
mercedes_e_class_w124_1985_1995_mult/Run/help.hlp
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
mercedes_e_class_w124_1985_1995_mult/Run/interface.dat
Resource
win10v2004-20230220-en
Behavioral task
behavioral6
Sample
mercedes_e_class_w124_1985_1995_mult/Run/mev.dhl
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
mercedes_e_class_w124_1985_1995_mult/W124_2.txt
Resource
win10v2004-20230220-en
Behavioral task
behavioral8
Sample
mercedes_e_class_w124_1985_1995_mult/autorun.inf
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
mercedes_e_class_w124_1985_1995_mult/mercedes_e_class_w124_1985_1995_mult.jpg
Resource
win10v2004-20230220-en
Behavioral task
behavioral10
Sample
mercedes_e_class_w124_1985_1995_mult/mercedes_e_class_w124_1985_1995_mult.txt
Resource
win10v2004-20230220-en
General
-
Target
mercedes_e_class_w124_1985_1995_mult/autorun.inf
-
Size
49B
-
MD5
d0ddea42f139e5947f0069c7bdfff8d4
-
SHA1
b542981cf7130a88bec7bf08f648787589c5c873
-
SHA256
0f81788d3af3ab19eb50aea7ab2fc75bca50e8b7c2261a72fa22237d14864443
-
SHA512
37fc803334b65802daf6ce8f99838a93336fe4f4f365cec967c19aede7e0482ef017b6ec69a934898bfba52c59fe2551f98ae09a7df17a6c6ea61503d36c228b
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 4424 NOTEPAD.EXE