Analysis

  • max time kernel
    157s
  • max time network
    183s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08/09/2022, 02:29

General

  • Target

    PowerISO/App/PowerISO64/lame_enc.dll

  • Size

    369KB

  • MD5

    3ddbe1ba218722dff684f83d86299807

  • SHA1

    267b1f9829e9c2a508a9dd564a9dde6d373123f0

  • SHA256

    89d12c8147b36344647d4ffd109ff8d237d9c0c88194048f842ca97a3b079c97

  • SHA512

    e415d7ebc5a00e8ee4d4a7b8294924aab8eaa3cda3d0ad46d8546494a5965e28d1dfe5710c1cb0d5c3a9f5b9c1b60243227217d71ea49187077492746632cbf3

  • SSDEEP

    6144:8cUdD9kke1LoEpkqNdnDRjX0cBPkd3zujZx7Y3eg8gAoeR1DOWtoUqoTE6LEU4Gi:8cUdD9kkKJpdnDRjX0cBPkd3zujZlY3/

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\PowerISO\App\PowerISO64\lame_enc.dll,#1
    1⤵
      PID:2032
      • C:\Windows\system32\WerFault.exe
        C:\Windows\system32\WerFault.exe -u -p 2032 -s 328
        2⤵
        • Program crash
        PID:2344
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -pss -s 408 -p 2032 -ip 2032
      1⤵
        PID:864

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads