2088e41b0a15b59a613a35efe70ba73cf498a8e11fced9d332d9537d51743ac8 | Triage

Analysis

max time kernel
2s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
15/09/2022, 06:01

Sharing

Reason

platform exec: image=C:\Users\Admin\AppData\Local\Temp\SndVol.exe command="C:\Users\Admin\AppData\Local\Temp\SndVol.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: %1 is not a valid Win32 application.

Report Analysis Logs

General

Target

SndVol.exe
Size

256KB
MD5

0d8208f039702f6d7fea2fc002836408
SHA1

b3e64e264c4c0d69be7817d9b9f9e73ab67d0c93
SHA256

496feebc8bece33f0d6b5f11b7d03a6a7826ea3d72ac253fbc528c5c3aee72ff
SHA512

cc5718701ffb6bd48a34f86f8261af2b2a4d0ce64e9935d632430ed2019dff5a2742c5e2ea5651921bb1a7be311c9a10247365d358b2761684532a006e2c967e
SSDEEP

3072:GnKtvVY2qCA4eXt+e0k95N4HfRyqPAP/PKiAcLfJ9sBjbEyB7HbIHP/:GnKYCA5XEed5N4HfRVjcrJ9fy103

Score

1^/10

Malware Config

Signatures

C:\Users\Admin\AppData\Local\Temp\SndVol.exe
"C:\Users\Admin\AppData\Local\Temp\SndVol.exe"
1⤵
PID:1356

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads