b9af69ac821a649f211c99e3edf32a76a213e9450b5e972a6cdda5758af530dd

max time kernel
132s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
23/08/2024, 00:51

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

powercfg.exe
Size

116KB
MD5

733c97e8ecf2ca6fefc2836cbecf64a5
SHA1

f79e2c89d7f71712516ea7f70f684210e62c0b67
SHA256

19e9870ccc87ddc696eac1a10979f7be15403cb884b7c2f604d4975d3cc1b887
SHA512

25f7a7c963335c724d1d49316cc52312c6c3773905a274f57b3a048ff1b12e6a53d01dd57eca7fa177ea827404363dbee02a5c140330021eb3e357672bc37970
SSDEEP

1536:CjcdiI1HJ5eXTwY7NHxAw81iMuuZl8sVRByoI3QwjHkGb698NM+GM4umkVNi+G:CZCr6NOw81iMuussrQoVGbG+rGMBu

Score

6^/10

persistence

Malware Config

Signatures

Power Settings 1 TTPs 1 IoCs

powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.

persistence

Power Settings

T1653

pid	Process
4524	powercfg.exe

C:\Users\Admin\AppData\Local\Temp\powercfg.exe
"C:\Users\Admin\AppData\Local\Temp\powercfg.exe"
1⤵
- Power Settings
PID:4524

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Power Settings

T1653

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads