e5d04853d987aaf6e91c6b9cf448d26ba87320896075929e2fb3c6fa84f07c45 | Triage

Analysis

max time kernel
1s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
15/09/2022, 06:02

Sharing

Reason

platform exec: image=C:\Users\Admin\AppData\Local\Temp\SndVol.exe command="C:\Users\Admin\AppData\Local\Temp\SndVol.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: %1 is not a valid Win32 application.

Report Analysis Logs

General

Target

SndVol.exe
Size

256KB
MD5

0d8208f039702f6d7fea2fc002836408
SHA1

b3e64e264c4c0d69be7817d9b9f9e73ab67d0c93
SHA256

496feebc8bece33f0d6b5f11b7d03a6a7826ea3d72ac253fbc528c5c3aee72ff
SHA512

cc5718701ffb6bd48a34f86f8261af2b2a4d0ce64e9935d632430ed2019dff5a2742c5e2ea5651921bb1a7be311c9a10247365d358b2761684532a006e2c967e
SSDEEP

3072:GnKtvVY2qCA4eXt+e0k95N4HfRyqPAP/PKiAcLfJ9sBjbEyB7HbIHP/:GnKYCA5XEed5N4HfRVjcrJ9fy103

Score

1^/10

Malware Config

Signatures

C:\Users\Admin\AppData\Local\Temp\SndVol.exe
"C:\Users\Admin\AppData\Local\Temp\SndVol.exe"
1⤵
PID:1520

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads