Analysis

  • max time kernel
    3s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    08/09/2022, 02:29

Errors

Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\PowerISO\App\DefaultData\settings\scdemu.exe command="C:\Users\Admin\AppData\Local\Temp\PowerISO\App\DefaultData\settings\scdemu.exe" wdir=C:\Users\Admin\AppData\Local\Temp\PowerISO\App\DefaultData\settings Payload error: The %1 application cannot be run in Win32 mode.

General

  • Target

    PowerISO/App/DefaultData/settings/scdemu.exe

  • Size

    121KB

  • MD5

    4b5579223186e2e1ab4a24b608fdc949

  • SHA1

    7836a870b946c26f718de2f6e27631286e27add8

  • SHA256

    c7b58da9fd4cf2f7f83f92b2e98437a2420150fec6e58c2bd84c82edd2da9a8e

  • SHA512

    410be06b5c17d44e83fba95a07d8c92f3ee318055adffe51bfa45bd61938c54e8f8f0f819b31133d3028d64b5d3b070ed49e2e4031054e825b0d73f1cff650f7

  • SSDEEP

    1536:Q/fgW0Hm+cHFyFv6or1StlDEgFCsd2kDXaPaSPi20jE8q5swDzAWyyighSr:iycHFyF9RStlDdtXoan2g8sEpOr

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\PowerISO\App\DefaultData\settings\scdemu.exe
    "C:\Users\Admin\AppData\Local\Temp\PowerISO\App\DefaultData\settings\scdemu.exe"
    1⤵
      PID:1412

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1412-54-0x0000000000010000-0x0000000000028EA0-memory.dmp

      Filesize

      99KB