Overview

overview

10

Static

static

InstallerAppSetup.exe

windows7-x64

10

InstallerAppSetup.exe

windows10-2004-x64

10

Uses of Ad...ex.dll

windows7-x64

8

Uses of Ad...ex.dll

windows10-2004-x64

8

Uses of Ad...0x.exe

windows7-x64

Uses of Ad...0x.exe

windows10-2004-x64

Uses of Ad...ir.exe

windows7-x64

Uses of Ad...ir.exe

windows10-2004-x64

Uses of Ad...3x.exe

windows7-x64

Uses of Ad...3x.exe

windows10-2004-x64

Uses of Ad...31.exe

windows7-x64

Uses of Ad...31.exe

windows10-2004-x64

Uses of Ad...10.exe

windows7-x64

Uses of Ad...10.exe

windows10-2004-x64

Uses of Ad...ex.dll

windows7-x64

1

Uses of Ad...ex.dll

windows10-2004-x64

1

Uses of Ad...ex.dll

windows7-x64

8

Uses of Ad...ex.dll

windows10-2004-x64

8

Uses of Ad...0x.exe

windows7-x64

Uses of Ad...0x.exe

windows10-2004-x64

Uses of Ad...ir.exe

windows7-x64

Uses of Ad...ir.exe

windows10-2004-x64

Uses of Ad...ex.dll

windows7-x64

1

Uses of Ad...ex.dll

windows10-2004-x64

1

Uses of Ad...0x.exe

windows7-x64

Uses of Ad...0x.exe

windows10-2004-x64

Uses of Ad...ir.exe

windows7-x64

Uses of Ad...ir.exe

windows10-2004-x64

Uses of Ad...3x.exe

windows7-x64

Uses of Ad...3x.exe

windows10-2004-x64

Uses of Ad...31.exe

windows7-x64

Uses of Ad...31.exe

windows10-2004-x64

Resubmissions

10/01/2023, 14:38

230110-rz57pagd48 10

08/01/2023, 12:56

230108-p6e8qsha4s 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NewSetup-Updated-File-P@$$-8889.zip

  • Size

    5.4MB

  • MD5

    15fc4c8ac30116b091e6cead454f09fb

  • SHA1

    bb97786331a35878e46093ef08d2444644d4f270

  • SHA256

    fed0040fbe4a081fec8564c9ea7ac5336699b0a718acafc608f2e81ae38c0edb

  • SHA512

    c3ee7a373eb3294c84b13cc42ce994ba2d63e55c4062b81a5413fec9d62bea59610ea16ece85ef0ef1ae37c066aecdf7e0dd7e633f5880a8ed0185e741e5cc33

  • SSDEEP

    98304:5QxCeeJq4JI64lL6EAIdfNPDZSUfJR6SldhKpaF+dnNhIPpWGBFULtX7ygrLKaw7:R7/I64lL6EAgNfJR6m6K+nNqpWUUZLjE

Score
N/A

Malware Config

Signatures

Files

  • NewSetup-Updated-File-P@$$-8889.zip
    .zip

    Password: 8889

  • p12/InstallerAppSetup.zip
    .zip

    Password: 8889

  • Globalization/Time Zone/timezoneMapping.xml
  • Globalization/Time Zone/timezones.xml
  • InstallerAppSetup.exe
    .exe windows x86

    Password: 8889

    156850d66b0297cdddf84c354537a3ba


    Headers

    Imports

    Sections

  • Uses of Additional Files/WinAll/BeholdTV/amd64/bhkspex.x64
    .dll regsvr32 windows x64

    Password: 8889

    c2b63eb78a633a8cf029f36d00413c44


    Headers

    Imports

    Exports

    Sections

  • Uses of Additional Files/WinAll/BeholdTV/amd64/cx2310x.sys
    .exe windows x64

    Password: 8889

    ded2398681571d460a573fbec8267082


    Headers

    Imports

    Sections

  • Uses of Additional Files/WinAll/BeholdTV/amd64/cxpolir.sys
    .exe windows x64

    Password: 8889

    ea7483a8eb714ec3ea508bf58b81a559


    Headers

    Imports

    Sections

  • Uses of Additional Files/WinAll/BeholdTV/amd64/saa713x.sys
    .exe windows x64

    Password: 8889

    e43ebc442a44b98402c01aa44cd9766e


    Headers

    Imports

    Sections

  • Uses of Additional Files/WinAll/BeholdTV/amd64/saa7231.sys
    .exe windows x64

    Password: 8889

    2d0e9e8011b8f2a5023ebc8f741f9c49


    Headers

    Imports

    Sections

  • Uses of Additional Files/WinAll/BeholdTV/amd64/ttm6010.sys
    .exe windows x64

    Password: 8889

    647437779ebf46177e2c6e415361ea9b


    Headers

    Imports

    Sections

  • Uses of Additional Files/WinAll/BeholdTV/beholder.bin
  • Uses of Additional Files/WinAll/BeholdTV/beholder.cat
  • Uses of Additional Files/WinAll/BeholdTV/beholder.inf
  • Uses of Additional Files/WinAll/BeholdTV/bhkspex.dll
    .dll regsvr32 windows x86

    24ed8993fd619d7b830ee8a6485904da


    Headers

    Imports

    Exports

    Sections

  • Uses of Additional Files/WinAll/BeholdTV/bhkspex.x64
    .dll regsvr32 windows x64

    c2b63eb78a633a8cf029f36d00413c44


    Headers

    Imports

    Exports

    Sections

  • Uses of Additional Files/WinAll/BeholdTV/cx2310x.sys
    .exe windows x86

    72758abb4fd59d040b279c65c0752ea7


    Headers

    Imports

    Sections

  • Uses of Additional Files/WinAll/BeholdTV/cxpolir.sys
    .exe windows x86

    42c0ab85aed4e3f6e63353e7577f9e01


    Headers

    Imports

    Sections

  • Uses of Additional Files/WinAll/BeholdTV/i386/bhkspex.dll
    .dll regsvr32 windows x86

    24ed8993fd619d7b830ee8a6485904da


    Headers

    Imports

    Exports

    Sections

  • Uses of Additional Files/WinAll/BeholdTV/i386/cx2310x.sys
    .exe windows x86

    72758abb4fd59d040b279c65c0752ea7


    Headers

    Imports

    Sections

  • Uses of Additional Files/WinAll/BeholdTV/i386/cxpolir.sys
    .exe windows x86

    42c0ab85aed4e3f6e63353e7577f9e01


    Headers

    Imports

    Sections

  • Uses of Additional Files/WinAll/BeholdTV/i386/saa713x.sys
    .exe windows x86

    dccc7d9930f7acdf7504c66ef621047a


    Headers

    Imports

    Sections

  • Uses of Additional Files/WinAll/BeholdTV/i386/saa7231.sys
    .exe windows x86

    4e6dd13ddad7dd7d1927110593fdd162


    Headers

    Imports

    Sections

  • Uses of Additional Files/WinAll/BeholdTV/i386/ttm6010.sys
    .exe windows x86

    1e8df125497f0e9c4f965b821e5f1dcb


    Headers

    Imports

    Sections

  • Uses of Additional Files/WinAll/BeholdTV/install.x64
    .exe windows x64

    5292520ce02adff7057028b73fd61d03


    Headers

    Imports

    Sections

  • Uses of Additional Files/WinAll/BeholdTV/saa713x.sys
    .exe windows x86

    dccc7d9930f7acdf7504c66ef621047a


    Headers

    Imports

    Sections

  • Uses of Additional Files/WinAll/BeholdTV/saa7231.sys
    .exe windows x86

    4e6dd13ddad7dd7d1927110593fdd162


    Headers

    Imports

    Sections

  • Uses of Additional Files/WinAll/BeholdTV/ttm6010.sys
    .exe windows x86

    1e8df125497f0e9c4f965b821e5f1dcb


    Headers

    Imports

    Sections