Analysis

  • max time kernel
    4s
  • max time network
    13s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15-01-2023 13:52

Errors

Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\SetupSoft(x64,x32)\Uses of Additional Files\WinAll\BeholdTV\amd64\ttm6010.exe command="C:\Users\Admin\AppData\Local\Temp\SetupSoft(x64,x32)\Uses of Additional Files\WinAll\BeholdTV\amd64\ttm6010.exe" wdir=C:\Users\Admin\AppData\Local\Temp\SetupSoft(x64,x32)\Uses of Additional Files\WinAll\BeholdTV\amd64 Payload error: The %1 application cannot be run in Win32 mode.

General

  • Target

    SetupSoft(x64,x32)/Uses of Additional Files/WinAll/BeholdTV/amd64/ttm6010.exe

  • Size

    160KB

  • MD5

    216a6873a34eb96db27668f2128abce9

  • SHA1

    ee6f09b88c003714e50c2783e15c770874e1cfd3

  • SHA256

    04f0f0d6ab22c6fd100e3e3277e54f0f9852b7a2251d1bd8f94befd55fae351a

  • SHA512

    c0e858ae1a0fa94a188d2be3bd4a2671ec4cfcaca206ee86bcfa17f7c98325e6150dec10a8a6b9654e33d1ec1a88bc116dcaa24cd1c7bb5f9974dee72184df5f

  • SSDEEP

    3072:hVhoEmXJ0beoQrW+7bmvSZgRCxvYd9VEjx9YHSc:hVhoEJioQDmaCCxvQVEjxGH

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\SetupSoft(x64,x32)\Uses of Additional Files\WinAll\BeholdTV\amd64\ttm6010.exe
    "C:\Users\Admin\AppData\Local\Temp\SetupSoft(x64,x32)\Uses of Additional Files\WinAll\BeholdTV\amd64\ttm6010.exe"
    1⤵
      PID:1964

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1964-132-0x0000000000010000-0x0000000000038200-memory.dmp
      Filesize

      160KB