Overview
overview
8Static
static
PowerISO/423Down.url
windows7-x64
6PowerISO/423Down.url
windows10-2004-x64
6PowerISO/A...mu.exe
windows7-x64
PowerISO/A...mu.exe
windows10-2004-x64
PowerISO/A...64.exe
windows7-x64
PowerISO/A...64.exe
windows10-2004-x64
PowerISO/A...64.dll
windows7-x64
3PowerISO/A...64.dll
windows10-2004-x64
3PowerISO/A...ll.dll
windows7-x64
3PowerISO/A...ll.dll
windows10-2004-x64
3PowerISO/A...SH.dll
windows7-x64
8PowerISO/A...SH.dll
windows10-2004-x64
8PowerISO/A...64.dll
windows7-x64
8PowerISO/A...64.dll
windows10-2004-x64
8PowerISO/A...VM.exe
windows7-x64
1PowerISO/A...VM.exe
windows10-2004-x64
1PowerISO/A...SO.exe
windows7-x64
8PowerISO/A...SO.exe
windows10-2004-x64
8PowerISO/A...64.dll
windows7-x64
3PowerISO/A...64.dll
windows10-2004-x64
3PowerISO/A...on.exe
windows7-x64
1PowerISO/A...on.exe
windows10-2004-x64
1PowerISO/A...nc.dll
windows7-x64
3PowerISO/A...nc.dll
windows10-2004-x64
3PowerISO/A...AC.dll
windows7-x64
3PowerISO/A...AC.dll
windows10-2004-x64
3PowerISO/A...is.dll
windows7-x64
3PowerISO/A...is.dll
windows10-2004-x64
3PowerISO/A...so.exe
windows7-x64
1PowerISO/A...so.exe
windows10-2004-x64
1PowerISO/A...64.exe
windows7-x64
1PowerISO/A...64.exe
windows10-2004-x64
1Analysis
-
max time kernel
141s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
08-09-2022 02:29
Static task
static1
Behavioral task
behavioral1
Sample
PowerISO/423Down.url
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
PowerISO/423Down.url
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
PowerISO/App/DefaultData/settings/scdemu.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
PowerISO/App/DefaultData/settings/scdemu.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral5
Sample
PowerISO/App/DefaultData/settings/scdemu64.exe
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
PowerISO/App/DefaultData/settings/scdemu64.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
PowerISO/App/PowerISO64/7z-x64.dll
Resource
win7-20220901-en
Behavioral task
behavioral8
Sample
PowerISO/App/PowerISO64/7z-x64.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
PowerISO/App/PowerISO64/MACDll.dll
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
PowerISO/App/PowerISO64/MACDll.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral11
Sample
PowerISO/App/PowerISO64/PWRISOSH.dll
Resource
win7-20220812-en
Behavioral task
behavioral12
Sample
PowerISO/App/PowerISO64/PWRISOSH.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral13
Sample
PowerISO/App/PowerISO64/PWRISOSH64.dll
Resource
win7-20220901-en
Behavioral task
behavioral14
Sample
PowerISO/App/PowerISO64/PWRISOSH64.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral15
Sample
PowerISO/App/PowerISO64/PWRISOVM.exe
Resource
win7-20220812-en
Behavioral task
behavioral16
Sample
PowerISO/App/PowerISO64/PWRISOVM.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral17
Sample
PowerISO/App/PowerISO64/PowerISO.exe
Resource
win7-20220812-en
Behavioral task
behavioral18
Sample
PowerISO/App/PowerISO64/PowerISO.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral19
Sample
PowerISO/App/PowerISO64/UnRAR64.dll
Resource
win7-20220812-en
Behavioral task
behavioral20
Sample
PowerISO/App/PowerISO64/UnRAR64.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral21
Sample
PowerISO/App/PowerISO64/devcon.exe
Resource
win7-20220812-en
Behavioral task
behavioral22
Sample
PowerISO/App/PowerISO64/devcon.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral23
Sample
PowerISO/App/PowerISO64/lame_enc.dll
Resource
win7-20220901-en
Behavioral task
behavioral24
Sample
PowerISO/App/PowerISO64/lame_enc.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral25
Sample
PowerISO/App/PowerISO64/libFLAC.dll
Resource
win7-20220901-en
Behavioral task
behavioral26
Sample
PowerISO/App/PowerISO64/libFLAC.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral27
Sample
PowerISO/App/PowerISO64/libvorbis.dll
Resource
win7-20220812-en
Behavioral task
behavioral28
Sample
PowerISO/App/PowerISO64/libvorbis.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral29
Sample
PowerISO/App/PowerISO64/piso.exe
Resource
win7-20220812-en
Behavioral task
behavioral30
Sample
PowerISO/App/PowerISO64/piso.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral31
Sample
PowerISO/App/PowerISO64/setup64.exe
Resource
win7-20220812-en
Behavioral task
behavioral32
Sample
PowerISO/App/PowerISO64/setup64.exe
Resource
win10v2004-20220812-en
General
-
Target
PowerISO/App/PowerISO64/7z-x64.dll
-
Size
1.7MB
-
MD5
bbf51226a8670475f283a2d57460d46c
-
SHA1
6388883ced0ce14ede20c7798338673ff8d6204a
-
SHA256
73578f14d50f747efa82527a503f1ad542f9db170e2901eddb54d6bce93fc00e
-
SHA512
f68eb9c4ba0d923082107cff2f0e7f78e80be243b9d92cfab7298f59461fcca2c5c944d4577f161f11a2011c0958a3c32896eba4f0e89cd9f8aed97ab5bc74f9
-
SSDEEP
24576:fznngr4eig/HxkaoDFITvg9iLXYgIcjWBzb139EOapmYp:fz64gxnoRGI9MXFrjWLNEOapmYp
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4984 2112 WerFault.exe 60
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\PowerISO\App\PowerISO64\7z-x64.dll,#11⤵PID:2112
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2112 -s 3482⤵
- Program crash
PID:4984
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 428 -p 2112 -ip 21121⤵PID:4268