Analysis

  • max time kernel
    7s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    08-09-2022 02:29

Errors

Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\PowerISO\App\DefaultData\settings\scdemu64.exe command="C:\Users\Admin\AppData\Local\Temp\PowerISO\App\DefaultData\settings\scdemu64.exe" wdir=C:\Users\Admin\AppData\Local\Temp\PowerISO\App\DefaultData\settings Payload error: The %1 application cannot be run in Win32 mode.

General

  • Target

    PowerISO/App/DefaultData/settings/scdemu64.exe

  • Size

    135KB

  • MD5

    92eae8dec1f992db12aa23d9d55f264a

  • SHA1

    add6697b8c1c71980e391619e81e0bada05e38ee

  • SHA256

    d01a58e0a222e4d301b75ae80150d8cbc17f56b3f6458352d2c7c449be302eee

  • SHA512

    443a12a1a49e388725ee347e650297ba5268d655acd08e623ea988cde07ae08ae861620b600fb223358339eeab926fee1c8377386501310c68a3eb9515649441

  • SSDEEP

    3072:hl1VSgPra4TD5Yt2JVLuPIqEjOZN7mPARacgx:hl3DtYtm+Ij2aZ

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\PowerISO\App\DefaultData\settings\scdemu64.exe
    "C:\Users\Admin\AppData\Local\Temp\PowerISO\App\DefaultData\settings\scdemu64.exe"
    1⤵
      PID:864

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/864-54-0x0000000000010000-0x0000000000037000-memory.dmp

      Filesize

      156KB