Analysis

  • max time kernel
    0s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    03-01-2023 22:38

Errors

Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\BlueSoleil 1.6.1.1 official release\AmbiCom\OXSER.exe command="C:\Users\Admin\AppData\Local\Temp\BlueSoleil 1.6.1.1 official release\AmbiCom\OXSER.exe" wdir=C:\Users\Admin\AppData\Local\Temp\BlueSoleil 1.6.1.1 official release\AmbiCom Payload error: The %1 application cannot be run in Win32 mode.

General

  • Target

    BlueSoleil 1.6.1.1 official release/AmbiCom/OXSER.exe

  • Size

    48KB

  • MD5

    39f8e23163aa3e972cb59c6eb70679ee

  • SHA1

    bd2864f8ccbe51495cf1e588663f9c5db9545ba8

  • SHA256

    86ebd5e0f7954ddf8ac61cc468193a775203a229f9be813c741291f8b7b81070

  • SHA512

    bfb69c3830af46c688e6b1635464032b613a0509f40a927147a45fad074d264cc32f35a346b536ec21467248329e6e990679e2392cd8b48099f0f4cc3d89c5fc

  • SSDEEP

    768:TPvP6lZwsh/w2wCvLyX9hURDfB0rUrKdEK0clL+Cf:TA1Y27WGDfCrU3KX

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\BlueSoleil 1.6.1.1 official release\AmbiCom\OXSER.exe
    "C:\Users\Admin\AppData\Local\Temp\BlueSoleil 1.6.1.1 official release\AmbiCom\OXSER.exe"
    1⤵
      PID:1432

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1432-54-0x0000000000010000-0x000000000001C100-memory.dmp

      Filesize

      48KB