Overview

overview

10

Static

static

InstallerAppSetup.exe

windows7-x64

10

InstallerAppSetup.exe

windows10-2004-x64

10

Uses of Ad...ex.dll

windows7-x64

8

Uses of Ad...ex.dll

windows10-2004-x64

8

Uses of Ad...0x.exe

windows7-x64

Uses of Ad...0x.exe

windows10-2004-x64

Uses of Ad...ir.exe

windows7-x64

Uses of Ad...ir.exe

windows10-2004-x64

Uses of Ad...3x.exe

windows7-x64

Uses of Ad...3x.exe

windows10-2004-x64

Uses of Ad...31.exe

windows7-x64

Uses of Ad...31.exe

windows10-2004-x64

Uses of Ad...10.exe

windows7-x64

Uses of Ad...10.exe

windows10-2004-x64

Uses of Ad...ex.dll

windows7-x64

1

Uses of Ad...ex.dll

windows10-2004-x64

1

Uses of Ad...ex.dll

windows7-x64

8

Uses of Ad...ex.dll

windows10-2004-x64

8

Uses of Ad...0x.exe

windows7-x64

Uses of Ad...0x.exe

windows10-2004-x64

Uses of Ad...ir.exe

windows7-x64

Uses of Ad...ir.exe

windows10-2004-x64

Uses of Ad...ex.dll

windows7-x64

1

Uses of Ad...ex.dll

windows10-2004-x64

1

Uses of Ad...0x.exe

windows7-x64

Uses of Ad...0x.exe

windows10-2004-x64

Uses of Ad...ir.exe

windows7-x64

Uses of Ad...ir.exe

windows10-2004-x64

Uses of Ad...3x.exe

windows7-x64

Uses of Ad...3x.exe

windows10-2004-x64

Uses of Ad...31.exe

windows7-x64

Uses of Ad...31.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NewFile-Setup-P@$$-1998.zip

  • Size

    5.4MB

  • MD5

    f2d0f8587dccc2528412e0e8e0f35cc1

  • SHA1

    1a99909b56881829cc03cf2430b64a6f70a83633

  • SHA256

    46c8d04c28e274e8e1c1d91f3522a2f354e27cc26da67adabcefce8cc0371807

  • SHA512

    683fd8ae1b4b89800c53c3b1ef6eebbe2fd1e82160e13cd63ee86e9b72e6a58e7dc6aa746d67aaa1f191fa4aa89738ef1857ab9010b7cfd212094e1c73f31ef9

  • SSDEEP

    98304:qf2jMKCV8tnVoaCqC3xnOoSHhkijEx7Wq66AlKjgkwEONV6PKWMVY+EB:LCV8m73xOnnjwWq6yj2L6PKq3B

Score
N/A

Malware Config

Signatures

Files

  • NewFile-Setup-P@$$-1998.zip
    .zip

    Password: 1998

  • p12/InstallerAppSetup.zip
    .zip

    Password: 1998

  • Globalization/Time Zone/timezoneMapping.xml
  • Globalization/Time Zone/timezones.xml
  • InstallerAppSetup.exe
    .exe windows x86

    Password: 1998

    156850d66b0297cdddf84c354537a3ba


    Headers

    Imports

    Sections

  • Uses of Additional Files/WinAll/BeholdTV/amd64/bhkspex.x64
    .dll regsvr32 windows x64

    Password: 1998

    c2b63eb78a633a8cf029f36d00413c44


    Headers

    Imports

    Exports

    Sections

  • Uses of Additional Files/WinAll/BeholdTV/amd64/cx2310x.sys
    .exe windows x64

    Password: 1998

    ded2398681571d460a573fbec8267082


    Headers

    Imports

    Sections

  • Uses of Additional Files/WinAll/BeholdTV/amd64/cxpolir.sys
    .exe windows x64

    Password: 1998

    ea7483a8eb714ec3ea508bf58b81a559


    Headers

    Imports

    Sections

  • Uses of Additional Files/WinAll/BeholdTV/amd64/saa713x.sys
    .exe windows x64

    Password: 1998

    e43ebc442a44b98402c01aa44cd9766e


    Headers

    Imports

    Sections

  • Uses of Additional Files/WinAll/BeholdTV/amd64/saa7231.sys
    .exe windows x64

    Password: 1998

    2d0e9e8011b8f2a5023ebc8f741f9c49


    Headers

    Imports

    Sections

  • Uses of Additional Files/WinAll/BeholdTV/amd64/ttm6010.sys
    .exe windows x64

    Password: 1998

    647437779ebf46177e2c6e415361ea9b


    Headers

    Imports

    Sections

  • Uses of Additional Files/WinAll/BeholdTV/beholder.bin
  • Uses of Additional Files/WinAll/BeholdTV/beholder.cat
  • Uses of Additional Files/WinAll/BeholdTV/beholder.inf
  • Uses of Additional Files/WinAll/BeholdTV/bhkspex.dll
    .dll regsvr32 windows x86

    24ed8993fd619d7b830ee8a6485904da


    Headers

    Imports

    Exports

    Sections

  • Uses of Additional Files/WinAll/BeholdTV/bhkspex.x64
    .dll regsvr32 windows x64

    c2b63eb78a633a8cf029f36d00413c44


    Headers

    Imports

    Exports

    Sections

  • Uses of Additional Files/WinAll/BeholdTV/cx2310x.sys
    .exe windows x86

    72758abb4fd59d040b279c65c0752ea7


    Headers

    Imports

    Sections

  • Uses of Additional Files/WinAll/BeholdTV/cxpolir.sys
    .exe windows x86

    42c0ab85aed4e3f6e63353e7577f9e01


    Headers

    Imports

    Sections

  • Uses of Additional Files/WinAll/BeholdTV/i386/bhkspex.dll
    .dll regsvr32 windows x86

    24ed8993fd619d7b830ee8a6485904da


    Headers

    Imports

    Exports

    Sections

  • Uses of Additional Files/WinAll/BeholdTV/i386/cx2310x.sys
    .exe windows x86

    72758abb4fd59d040b279c65c0752ea7


    Headers

    Imports

    Sections

  • Uses of Additional Files/WinAll/BeholdTV/i386/cxpolir.sys
    .exe windows x86

    42c0ab85aed4e3f6e63353e7577f9e01


    Headers

    Imports

    Sections

  • Uses of Additional Files/WinAll/BeholdTV/i386/saa713x.sys
    .exe windows x86

    dccc7d9930f7acdf7504c66ef621047a


    Headers

    Imports

    Sections

  • Uses of Additional Files/WinAll/BeholdTV/i386/saa7231.sys
    .exe windows x86

    4e6dd13ddad7dd7d1927110593fdd162


    Headers

    Imports

    Sections

  • Uses of Additional Files/WinAll/BeholdTV/i386/ttm6010.sys
    .exe windows x86

    1e8df125497f0e9c4f965b821e5f1dcb


    Headers

    Imports

    Sections

  • Uses of Additional Files/WinAll/BeholdTV/install.x64
    .exe windows x64

    5292520ce02adff7057028b73fd61d03


    Headers

    Imports

    Sections

  • Uses of Additional Files/WinAll/BeholdTV/saa713x.sys
    .exe windows x86

    dccc7d9930f7acdf7504c66ef621047a


    Headers

    Imports

    Sections

  • Uses of Additional Files/WinAll/BeholdTV/saa7231.sys
    .exe windows x86

    4e6dd13ddad7dd7d1927110593fdd162


    Headers

    Imports

    Sections

  • Uses of Additional Files/WinAll/BeholdTV/ttm6010.sys
    .exe windows x86

    1e8df125497f0e9c4f965b821e5f1dcb


    Headers

    Imports

    Sections