77cd566108bdf69dbf6a2a52438a0dc20c3d66f2c2b5c4ad20556656e5593794

Analysis

max time kernel
93s
max time network
160s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
29-11-2022 13:39

Target

POWERI~1.exe
Size

990KB
MD5

94f93d84800fe42007851bb20db86974
SHA1

e2c943c5224ef7edbd82e60e5e7942eafcbe173f
SHA256

8165328b5b69aad9408b81cc72eabbf2674a796e6e8af362d9aea180935aabdf
SHA512

de5f39eb6d810cb6e766c8887685eacb643adca195e07c2f52d1127e49998c63b3aa98a1fbe14dec3b1aa53c4823177a9bba6f3bded163132e79dcc1e6561b82
SSDEEP

24576:kVaxuUAhnELHfP0Q1S6xAWpZX1XaJruEIT8fKuQ:8xaP0r6ppZoEEI4fKl

Score

7^/10

Loads dropped DLL 2 IoCs

Processes:

POWERI~1.exe

pid process

2952 POWERI~1.exe
2952 POWERI~1.exe

pid	process
2952	POWERI~1.exe
2952	POWERI~1.exe

C:\Users\Admin\AppData\Local\Temp\POWERI~1.exe
"C:\Users\Admin\AppData\Local\Temp\POWERI~1.exe"
1⤵
- Loads dropped DLL
PID:2952

C:\Users\Admin\AppData\Local\Temp\nsyE98C.tmp\System.dll
Filesize
9KB

MD5
afd989ef7eec6bf952bedfce541fe236

SHA1
5654b71c5b1089c2cec6381d8da5bd14a14e1a37

SHA256
5e97602008ba004c72d58f71e77ffe0a0ea01103867eb12a9ec0f28e72f440d8

SHA512
f4e3d88477d39218667dd482a08904b2b69435db7d1fdd492380544aff83895d393a288c329da69074b69c68f51db45f694dfea81fc12fa2042ed43b3d06440c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsyE98C.tmp\System.dll
Filesize
9KB

MD5
afd989ef7eec6bf952bedfce541fe236

SHA1
5654b71c5b1089c2cec6381d8da5bd14a14e1a37

SHA256
5e97602008ba004c72d58f71e77ffe0a0ea01103867eb12a9ec0f28e72f440d8

SHA512
f4e3d88477d39218667dd482a08904b2b69435db7d1fdd492380544aff83895d393a288c329da69074b69c68f51db45f694dfea81fc12fa2042ed43b3d06440c

Download Submit