Analysis
-
max time kernel
123s -
max time network
177s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
08/09/2022, 02:29
General
-
Target
PowerISO/App/PowerISO64/PWRISOVM.exe
-
Size
450KB
-
MD5
ae03e0635b05879b5d225f320a151c64
-
SHA1
46583ec46c00eac5fa3202d7c3c318c99afbe9fd
-
SHA256
0e6ab5c695f0cb3970b48747841139722de9c2d34c9da9e7b71ca31ed45995b3
-
SHA512
5b8858b070d8656430c29453eeea38800866aa1059d32aa1ce2d5155b046d9a39a35abafcff7b78875b628e9cf054722f3d983ca11bf9ab3289c944b36be5663
-
SSDEEP
6144:Bnit9sBtuk3FzyYs/OeuhaufIv0U6T9HpRTwugGSxgJvnEDAuEO1jU:Bnit9sBIk1zLs/I7aOBJtKtonEDAuEd
Score
1/10
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\PowerISO\App\PowerISO64\PWRISOVM.exe"C:\Users\Admin\AppData\Local\Temp\PowerISO\App\PowerISO64\PWRISOVM.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx