Analysis

  • max time kernel
    6s
  • max time network
    17s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15-01-2023 13:52

Errors

Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\SetupSoft(x64,x32)\Uses of Additional Files\WinAll\BeholdTV\amd64\saa7231.exe command="C:\Users\Admin\AppData\Local\Temp\SetupSoft(x64,x32)\Uses of Additional Files\WinAll\BeholdTV\amd64\saa7231.exe" wdir=C:\Users\Admin\AppData\Local\Temp\SetupSoft(x64,x32)\Uses of Additional Files\WinAll\BeholdTV\amd64 Payload error: The %1 application cannot be run in Win32 mode.

General

  • Target

    SetupSoft(x64,x32)/Uses of Additional Files/WinAll/BeholdTV/amd64/saa7231.exe

  • Size

    281KB

  • MD5

    eea0ccd8d1aa603d9f5a7136195db860

  • SHA1

    609b6c6dd32c3be1ce59ac245224ede5503480c6

  • SHA256

    f6b5cefbd2d36f0c42fd25f8fb8b5807fdc0a87bab299d9f3da65cc460e7a954

  • SHA512

    9bce0ef582a37e1662a60035436a37fd03b6514385a4d2cbb1d77847ce5e5d1de3427200e577db4af3358bfff3dd866a150a38720692e4cc6aa464517ac735d8

  • SSDEEP

    6144:xvsk/i5Dqi2l6C7SBvvEvFpuEHLxu/9J6z/:Vsk/q+uj6z/

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\SetupSoft(x64,x32)\Uses of Additional Files\WinAll\BeholdTV\amd64\saa7231.exe
    "C:\Users\Admin\AppData\Local\Temp\SetupSoft(x64,x32)\Uses of Additional Files\WinAll\BeholdTV\amd64\saa7231.exe"
    1⤵
      PID:4536

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4536-132-0x0000000000010000-0x0000000000056500-memory.dmp
      Filesize

      281KB