Analysis

  • max time kernel
    5s
  • max time network
    12s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15-01-2023 13:52

Errors

Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\SetupSoft(x64,x32)\Uses of Additional Files\WinAll\BeholdTV\amd64\cxpolir.exe command="C:\Users\Admin\AppData\Local\Temp\SetupSoft(x64,x32)\Uses of Additional Files\WinAll\BeholdTV\amd64\cxpolir.exe" wdir=C:\Users\Admin\AppData\Local\Temp\SetupSoft(x64,x32)\Uses of Additional Files\WinAll\BeholdTV\amd64 Payload error: The %1 application cannot be run in Win32 mode.

General

  • Target

    SetupSoft(x64,x32)/Uses of Additional Files/WinAll/BeholdTV/amd64/cxpolir.exe

  • Size

    23KB

  • MD5

    14b1f224d99fa6d8cf448385d86d2875

  • SHA1

    bf8b149846efdfa85f9d78b34b2e2ad88e54d547

  • SHA256

    bb120924de0b6797959114b5d038d664d685180a2808ef8784fb095b3b9d1f37

  • SHA512

    4d00bef1f7c18d2905cdcb4c38502e8425429f397b27a6fa6a924da5bc8b76422c7edb849aeac572f9db3fe84422593977f5fe623d2f42c2ec9717b14d9c26fe

  • SSDEEP

    384:aZo9kSMo+Bk553pBZ5vz8tQ/vs3CkwlhMbGLEake5YoynmecT+dLC0Hku9Msaabm:66t4pwlhH2e5VymecTfCkmZaaT

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\SetupSoft(x64,x32)\Uses of Additional Files\WinAll\BeholdTV\amd64\cxpolir.exe
    "C:\Users\Admin\AppData\Local\Temp\SetupSoft(x64,x32)\Uses of Additional Files\WinAll\BeholdTV\amd64\cxpolir.exe"
    1⤵
      PID:4512

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4512-132-0x0000000000010000-0x0000000000015D80-memory.dmp

      Filesize

      23KB