b1a842303958fe6433b91b72bb6eb2fec34602cafe400e42ba42d591a5fbee47

Submit
Reports

Overview

overview

Static

static

SetupSoft(...me.xml

windows10-2004-x64

SetupSoft(...gs.xml

windows10-2004-x64

SetupSoft(...ng.xml

windows10-2004-x64

SetupSoft(...ot.xml

windows10-2004-x64

SetupSoft(...ys.xml

windows10-2004-x64

SetupSoft(...ve.xml

windows10-2004-x64

SetupSoft(...al.xml

windows10-2004-x64

SetupSoft(...in.xml

windows10-2004-x64

SetupSoft(...ed.xml

windows10-2004-x64

SetupSoft(...vc.xml

windows10-2004-x64

SetupSoft(...vc.xml

windows10-2004-x64

SetupSoft(...ft.exe

windows10-2004-x64

SetupSoft(...ex.dll

windows10-2004-x64

SetupSoft(...0x.exe

windows10-2004-x64

SetupSoft(...ir.exe

windows10-2004-x64

SetupSoft(...3x.exe

windows10-2004-x64

SetupSoft(...31.exe

windows10-2004-x64

SetupSoft(...10.exe

windows10-2004-x64

SetupSoft(...ex.dll

windows10-2004-x64

SetupSoft(...ex.dll

windows10-2004-x64

SetupSoft(...0x.exe

windows10-2004-x64

SetupSoft(...ir.exe

windows10-2004-x64

SetupSoft(...ex.dll

windows10-2004-x64

SetupSoft(...0x.exe

windows10-2004-x64

SetupSoft(...ir.exe

windows10-2004-x64

SetupSoft(...3x.exe

windows10-2004-x64

SetupSoft(...31.exe

windows10-2004-x64

SetupSoft(...10.exe

windows10-2004-x64

SetupSoft(...ll.exe

windows10-2004-x64

SetupSoft(...3x.exe

windows10-2004-x64

SetupSoft(...31.exe

windows10-2004-x64

SetupSoft(...10.exe

windows10-2004-x64

Analysis

max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
15-01-2023 13:52

Sharing

Copy URL

Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

SetupSoft(x64,x32)/Resource files/AppXRuntime.xml

Resource

win10v2004-20221111-en

windows10-2004-x64

4 signatures

300 seconds

Behavioral task

behavioral2

Sample

SetupSoft(x64,x32)/Resource files/AuditSettings.xml

Resource

win10v2004-20221111-en

windows10-2004-x64

5 signatures

300 seconds

Behavioral task

behavioral3

Sample

SetupSoft(x64,x32)/Resource files/EventForwarding.xml

Resource

win10v2004-20220812-en

windows10-2004-x64

5 signatures

300 seconds

Behavioral task

behavioral4

Sample

SetupSoft(x64,x32)/Resource files/ExternalBoot.xml

Resource

win10v2004-20220901-en

windows10-2004-x64

5 signatures

300 seconds

Behavioral task

behavioral5

Sample

SetupSoft(x64,x32)/Resource files/FileSys.xml

Resource

win10v2004-20220812-en

windows10-2004-x64

5 signatures

300 seconds

Behavioral task

behavioral6

Sample

SetupSoft(x64,x32)/Resource files/SkyDrive.xml

Resource

win10v2004-20221111-en

windows10-2004-x64

5 signatures

300 seconds

Behavioral task

behavioral7

Sample

SetupSoft(x64,x32)/Resource files/WinCal.xml

Resource

win10v2004-20221111-en

windows10-2004-x64

5 signatures

300 seconds

Behavioral task

behavioral8

Sample

SetupSoft(x64,x32)/Resource files/WorkplaceJoin.xml

Resource

win10v2004-20221111-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral9

Sample

SetupSoft(x64,x32)/Resource files/msched.xml

Resource

win10v2004-20220901-en

windows10-2004-x64

5 signatures

300 seconds

Behavioral task

behavioral10

Sample

SetupSoft(x64,x32)/Resource files/wlansvc.xml

Resource

win10v2004-20220812-en

windows10-2004-x64

5 signatures

300 seconds

Behavioral task

behavioral11

Sample

SetupSoft(x64,x32)/Resource files/wwansvc.xml

Resource

win10v2004-20221111-en

windows10-2004-x64

5 signatures

300 seconds

Behavioral task

behavioral12

Sample

SetupSoft(x64,x32)/Setup_Soft.exe

Resource

win10v2004-20220812-en

windows10-2004-x64

27 signatures

300 seconds

Behavioral task

behavioral13

Sample

SetupSoft(x64,x32)/Uses of Additional Files/WinAll/BeholdTV/amd64/bhkspex.dll

Resource

win10v2004-20221111-en

persistence

windows10-2004-x64

2 signatures

300 seconds

Behavioral task

behavioral14

Sample

SetupSoft(x64,x32)/Uses of Additional Files/WinAll/BeholdTV/amd64/cx2310x.exe

Resource

win10v2004-20221111-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral15

Sample

SetupSoft(x64,x32)/Uses of Additional Files/WinAll/BeholdTV/amd64/cxpolir.exe

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral16

Sample

SetupSoft(x64,x32)/Uses of Additional Files/WinAll/BeholdTV/amd64/saa713x.exe

Resource

win10v2004-20220901-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral17

Sample

SetupSoft(x64,x32)/Uses of Additional Files/WinAll/BeholdTV/amd64/saa7231.exe

Resource

win10v2004-20221111-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral18

Sample

SetupSoft(x64,x32)/Uses of Additional Files/WinAll/BeholdTV/amd64/ttm6010.exe

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral19

Sample

SetupSoft(x64,x32)/Uses of Additional Files/WinAll/BeholdTV/bhkspex.dll

Resource

win10v2004-20220812-en

windows10-2004-x64

2 signatures

300 seconds

Behavioral task

behavioral20

Sample

SetupSoft(x64,x32)/Uses of Additional Files/WinAll/BeholdTV/bhkspex.dll

Resource

win10v2004-20221111-en

persistence

windows10-2004-x64

2 signatures

300 seconds

Behavioral task

behavioral21

Sample

SetupSoft(x64,x32)/Uses of Additional Files/WinAll/BeholdTV/cx2310x.exe

Resource

win10v2004-20221111-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral22

Sample

SetupSoft(x64,x32)/Uses of Additional Files/WinAll/BeholdTV/cxpolir.exe

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral23

Sample

SetupSoft(x64,x32)/Uses of Additional Files/WinAll/BeholdTV/i386/bhkspex.dll

Resource

win10v2004-20220901-en

windows10-2004-x64

2 signatures

300 seconds

Behavioral task

behavioral24

Sample

SetupSoft(x64,x32)/Uses of Additional Files/WinAll/BeholdTV/i386/cx2310x.exe

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral25

Sample

SetupSoft(x64,x32)/Uses of Additional Files/WinAll/BeholdTV/i386/cxpolir.exe

Resource

win10v2004-20221111-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral26

Sample

SetupSoft(x64,x32)/Uses of Additional Files/WinAll/BeholdTV/i386/saa713x.exe

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral27

Sample

SetupSoft(x64,x32)/Uses of Additional Files/WinAll/BeholdTV/i386/saa7231.exe

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral28

Sample

SetupSoft(x64,x32)/Uses of Additional Files/WinAll/BeholdTV/i386/ttm6010.exe

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral29

Sample

SetupSoft(x64,x32)/Uses of Additional Files/WinAll/BeholdTV/install.exe

Resource

win10v2004-20220812-en

windows10-2004-x64

3 signatures

300 seconds

Behavioral task

behavioral30

Sample

SetupSoft(x64,x32)/Uses of Additional Files/WinAll/BeholdTV/saa713x.exe

Resource

win10v2004-20221111-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral31

Sample

SetupSoft(x64,x32)/Uses of Additional Files/WinAll/BeholdTV/saa7231.exe

Resource

win10v2004-20221111-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral32

Sample

SetupSoft(x64,x32)/Uses of Additional Files/WinAll/BeholdTV/ttm6010.exe

Resource

win10v2004-20220901-en

windows10-2004-x64

0 signatures

300 seconds

Errors

Reason

Reading agent response: read tcp 10.127.0.1:42638->10.127.0.31:8000: read: connection timed out

Report Analysis Logs

General

Target

SetupSoft(x64,x32)/Resource files/WorkplaceJoin.xml
Size

1KB
MD5

4a94b4f104af2c09215eb52d7f84f748
SHA1

5c414d468a0b571ca9fec00364dd4e2a185dbe92
SHA256

5fabf5c534f78ce92bf7daa6d4ade2dd61002e689a8246928209bf38d7bf1bee
SHA512

971a7f298fb6ece17bd9e02d636988960b4955ed8c6e44d271f4405e06268b65db6ce396caeeb41113ef2d220418c7c0bd48f3dc5852de76331eec0307516af4

Score

7^/10

Malware Config

Signatures

Unexpected DNS network traffic destination 1 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.

Processes:

description ioc

Destination IP 162.159.36.2

Analysis

Sharing

Errors

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads