8b20c4f222723037b9df600a444b358820f9aa1e51c8e9553cb5465859f9d325

Analysis

max time kernel
11s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
10-06-2023 05:30

Sharing

Reason

platform exec: image=C:\Users\Admin\AppData\Local\Temp\Sounds\Drivers\NNSHttp\WVista\NNSHttp.exe command="C:\Users\Admin\AppData\Local\Temp\Sounds\Drivers\NNSHttp\WVista\NNSHttp.exe" wdir=C:\Users\Admin\AppData\Local\Temp\Sounds\Drivers\NNSHttp\WVista Payload error: The %1 application cannot be run in Win32 mode.

Report Analysis Logs

General

Target

Sounds/Drivers/NNSHttp/WVista/NNSHttp.exe
Size

209KB
MD5

96522be9ab926c44b3efe02d190eb399
SHA1

5a08ba21e9b6fb896a4bec7d35f0f697be7cb206
SHA256

5aed214a995fc9d3ec6d952d373c88e971cb3ad723c13f955bad1dba38dd90a8
SHA512

b02bf5ba76a7e4b416e04042664df04d914cadd029fe9318cea7111644272cbdc57a2283ebd27ed315caef27059590373f36ec135f837f0a8c10887adaa02918
SSDEEP

3072:U2J2GnFgrxWmZ9Hnmsq6y+bPOM2g7ufg0o/ef0Fl75bkB6V3z5+9ZPoBMRP7yx9:FJvUo8b+9M2dfg0o/wKd5bkR9ZPZe

Score

1^/10

Malware Config

Signatures

C:\Users\Admin\AppData\Local\Temp\Sounds\Drivers\NNSHttp\WVista\NNSHttp.exe
"C:\Users\Admin\AppData\Local\Temp\Sounds\Drivers\NNSHttp\WVista\NNSHttp.exe"
1⤵
PID:2020

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2020-0-0x0000000000010000-0x0000000000048000-memory.dmp

Filesize
224KB

Download