Analysis
-
max time kernel
10s -
max time network
2s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
15-01-2023 13:52
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\SetupSoft(x64,x32)\Uses of Additional Files\WinAll\BeholdTV\cxpolir.exe
command="C:\Users\Admin\AppData\Local\Temp\SetupSoft(x64,x32)\Uses of Additional Files\WinAll\BeholdTV\cxpolir.exe"
wdir=C:\Users\Admin\AppData\Local\Temp\SetupSoft(x64,x32)\Uses of Additional Files\WinAll\BeholdTV
Payload error: The %1 application cannot be run in Win32 mode.
General
-
Target
SetupSoft(x64,x32)/Uses of Additional Files/WinAll/BeholdTV/cxpolir.exe
-
Size
21KB
-
MD5
fa92979513968901734bf63801f7674a
-
SHA1
c93bf660c96276378a493beb93a5f273ef248863
-
SHA256
363d745974a2f2ef265b2ec070a01dad71265be993a2eacf7d0c9c8c909ec991
-
SHA512
713a81992e78d24fc5dc8b1f1f8975086be0f388bf943cf59996e1e4af0d88ee4e10fbf4b9c893a38313d31730cfe9d60d323c55aa14c09cddbfd8da72ead835
-
SSDEEP
384:VVuH11c3s0TrafD7rH1XUAV0RC5KuzNvvx0UOSaCKaFW7zQNnfiO5KQ:VVWM80SffTd7VgC5KuB/d0aq
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\SetupSoft(x64,x32)\Uses of Additional Files\WinAll\BeholdTV\cxpolir.exe"C:\Users\Admin\AppData\Local\Temp\SetupSoft(x64,x32)\Uses of Additional Files\WinAll\BeholdTV\cxpolir.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1824-132-0x0000000000010000-0x0000000000015780-memory.dmpFilesize
21KB