Overview
overview
3Static
static
1Reiter Eng...ck.rar
windows10-2004-x64
1Reiter Eng...ck.rar
windows11-21h2-x64
1extension/...ls.kn5
windows10-2004-x64
3extension/...ls.kn5
windows11-21h2-x64
3extension/..._B.kn5
windows10-2004-x64
3extension/..._B.kn5
windows11-21h2-x64
3extension/..._C.kn5
windows10-2004-x64
3extension/..._C.kn5
windows11-21h2-x64
3extension/...CC.ini
windows10-2004-x64
1extension/...CC.ini
windows11-21h2-x64
3extension/...CC.kn5
windows10-2004-x64
3extension/...CC.kn5
windows11-21h2-x64
3extension/...CC.ini
windows10-2004-x64
1extension/...CC.ini
windows11-21h2-x64
3extension/...CC.kn5
windows10-2004-x64
3extension/...CC.kn5
windows11-21h2-x64
3extension/...15.kn5
windows10-2004-x64
3extension/...15.kn5
windows11-21h2-x64
3extension/..._B.kn5
windows10-2004-x64
3extension/..._B.kn5
windows11-21h2-x64
3extension/...13.kn5
windows10-2004-x64
3extension/...13.kn5
windows11-21h2-x64
3extension/..._B.kn5
windows10-2004-x64
3extension/..._B.kn5
windows11-21h2-x64
3extension/...14.kn5
windows10-2004-x64
3extension/...14.kn5
windows11-21h2-x64
3extension/..._B.kn5
windows10-2004-x64
3extension/..._B.kn5
windows11-21h2-x64
3extension/...on.ini
windows10-2004-x64
1extension/...on.ini
windows11-21h2-x64
3extension/...ie.kn5
windows10-2004-x64
3extension/...ie.kn5
windows11-21h2-x64
3Analysis
- max time kernel
28s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
08/05/2026, 04:33
Static task
static1
Behavioral task
behavioral1
Sample
Reiter Engineering Car pack.rar
Resource
win10v2004-20260130-en
Behavioral task
behavioral2
Sample
Reiter Engineering Car pack.rar
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
extension/config/cars/cf/Camaro_Addons/EU_Tails.kn5
Resource
win10v2004-20260130-en
Behavioral task
behavioral4
Sample
extension/config/cars/cf/Camaro_Addons/EU_Tails.kn5
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
extension/config/cars/cf/Camaro_Addons/EU_Tails_Lod_B.kn5
Resource
win10v2004-20260130-en
Behavioral task
behavioral6
Sample
extension/config/cars/cf/Camaro_Addons/EU_Tails_Lod_B.kn5
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
extension/config/cars/cf/Camaro_Addons/EU_Tails_Lod_C.kn5
Resource
win10v2004-20260130-en
Behavioral task
behavioral8
Sample
extension/config/cars/cf/Camaro_Addons/EU_Tails_Lod_C.kn5
Resource
win11-20260130-en
Behavioral task
behavioral9
Sample
extension/config/cars/cf/Camaro_Addons/Numberplate_Blancpain_ACC.ini
Resource
win10v2004-20260130-en
Behavioral task
behavioral10
Sample
extension/config/cars/cf/Camaro_Addons/Numberplate_Blancpain_ACC.ini
Resource
win11-20260130-en
Behavioral task
behavioral11
Sample
extension/config/cars/cf/Camaro_Addons/Numberplate_Blancpain_ACC.kn5
Resource
win10v2004-20260130-en
Behavioral task
behavioral12
Sample
extension/config/cars/cf/Camaro_Addons/Numberplate_Blancpain_ACC.kn5
Resource
win11-20250610-en
Behavioral task
behavioral13
Sample
extension/config/cars/cf/Camaro_Addons/Numberplate_ROTC_ACC.ini
Resource
win10v2004-20260130-en
Behavioral task
behavioral14
Sample
extension/config/cars/cf/Camaro_Addons/Numberplate_ROTC_ACC.ini
Resource
win11-20260130-en
Behavioral task
behavioral15
Sample
extension/config/cars/cf/Camaro_Addons/Numberplate_ROTC_ACC.kn5
Resource
win10v2004-20260130-en
Behavioral task
behavioral16
Sample
extension/config/cars/cf/Camaro_Addons/Numberplate_ROTC_ACC.kn5
Resource
win11-20260130-en
Behavioral task
behavioral17
Sample
extension/config/cars/cf/Camaro_Addons/body_2014_2015.kn5
Resource
win10v2004-20260130-en
Behavioral task
behavioral18
Sample
extension/config/cars/cf/Camaro_Addons/body_2014_2015.kn5
Resource
win11-20250610-en
Behavioral task
behavioral19
Sample
extension/config/cars/cf/Camaro_Addons/body_2014_2015_Lod_B.kn5
Resource
win10v2004-20260130-en
Behavioral task
behavioral20
Sample
extension/config/cars/cf/Camaro_Addons/body_2014_2015_Lod_B.kn5
Resource
win11-20260130-en
Behavioral task
behavioral21
Sample
extension/config/cars/cf/Camaro_Addons/diffusor_2013.kn5
Resource
win10v2004-20260130-en
Behavioral task
behavioral22
Sample
extension/config/cars/cf/Camaro_Addons/diffusor_2013.kn5
Resource
win11-20260130-en
Behavioral task
behavioral23
Sample
extension/config/cars/cf/Camaro_Addons/diffusor_2013_Lod_B.kn5
Resource
win10v2004-20260130-en
Behavioral task
behavioral24
Sample
extension/config/cars/cf/Camaro_Addons/diffusor_2013_Lod_B.kn5
Resource
win11-20250610-en
Behavioral task
behavioral25
Sample
extension/config/cars/cf/Camaro_Addons/wing_2013_2014.kn5
Resource
win10v2004-20260130-en
Behavioral task
behavioral26
Sample
extension/config/cars/cf/Camaro_Addons/wing_2013_2014.kn5
Resource
win11-20260130-en
Behavioral task
behavioral27
Sample
extension/config/cars/cf/Camaro_Addons/wing_2013_2014_Lod_B.kn5
Resource
win10v2004-20260130-en
Behavioral task
behavioral28
Sample
extension/config/cars/cf/Camaro_Addons/wing_2013_2014_Lod_B.kn5
Resource
win11-20260130-en
Behavioral task
behavioral29
Sample
extension/config/cars/cf/Gallardo_Addons/Endu_Version.ini
Resource
win10v2004-20260130-en
Behavioral task
behavioral30
Sample
extension/config/cars/cf/Gallardo_Addons/Endu_Version.ini
Resource
win11-20260130-en
Behavioral task
behavioral31
Sample
extension/config/cars/cf/Gallardo_Addons/rex_Endu_Parts - Kopie.kn5
Resource
win10v2004-20260130-en
Behavioral task
behavioral32
Sample
extension/config/cars/cf/Gallardo_Addons/rex_Endu_Parts - Kopie.kn5
Resource
win11-20260130-en
General
- Target extension/config/cars/cf/Camaro_Addons/EU_Tails.kn5
- Size 4.3MB
- Sample260508-e6pgascz8w
- SHA256 f8210ae089ba589a889e07abca9b5583a39f7239cd8db08cf28badc5f8cebd37
- MD5 712a5b08eb53b964728be0b732c41ee1
- SHA1 fb62d477bc285ac62311b791923ae65d3085b34e
- SHA512 7473835b81a0e36df354c9d54024e05967e80ed6818c4c403d94c6f4c88ca78e7f2aebe016b9d85aefb4d53539667b1cc28c5e1a3553eb080f03aff3e6a2554e
- SSDEEP 12288:x8uo8Ik+CIUi6u5Z/RiSntLISg/um2QyTCHkb1f06GavJYHtVIcQ:x8umkli6u5RRiSn7NTTHbh5YjxQ
- TLSH T163262E26AF4AC078C89D107EBAA497F89194CC6ED5E90A4772853EB4BC73E71057CC93
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3847269522-1618051987-1942096715-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-3847269522-1618051987-1942096715-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3392 OpenWith.exe
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\extension\config\cars\cf\Camaro_Addons\EU_Tails.kn51⤵
- Modifies registry class
PID:2836
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:3392