Analysis

  • max time kernel
    3s
  • max time network
    5s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03-01-2023 22:38

Errors

Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\BlueSoleil 1.6.1.1 official release\CardsDrivers\CFCardSyss\SktBt2k.exe command="C:\Users\Admin\AppData\Local\Temp\BlueSoleil 1.6.1.1 official release\CardsDrivers\CFCardSyss\SktBt2k.exe" wdir=C:\Users\Admin\AppData\Local\Temp\BlueSoleil 1.6.1.1 official release\CardsDrivers\CFCardSyss Payload error: The %1 application cannot be run in Win32 mode.

General

  • Target

    BlueSoleil 1.6.1.1 official release/CardsDrivers/CFCardSyss/SktBt2k.exe

  • Size

    47KB

  • MD5

    42a39aa7ed51616e36adb5abddf8349b

  • SHA1

    700041c65fb3a759c565b4a5028670ef575d8c4c

  • SHA256

    4f7b7d33afb9b7d6d611e3d5270b527784892b9a2ab52c55ab4e9122dd603424

  • SHA512

    05f81fa19c53d6cf7a51f13e87a47d75c50a5e7a60d99af3cef999c8fd252e53c616bc1fe721c994406ee6dc19f47374e3196c4819ef4bdf0b6add3cb913bfc7

  • SSDEEP

    768:35PEAW+zAT+SAfdCKDjp2QAl6zGPkcLer8mYrTl:p8/TCM41ANXrrTl

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\BlueSoleil 1.6.1.1 official release\CardsDrivers\CFCardSyss\SktBt2k.exe
    "C:\Users\Admin\AppData\Local\Temp\BlueSoleil 1.6.1.1 official release\CardsDrivers\CFCardSyss\SktBt2k.exe"
    1⤵
      PID:3248

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3248-132-0x0000000000010000-0x000000000001BD40-memory.dmp

      Filesize

      47KB