Analysis

  • max time kernel
    1s
  • max time network
    5s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10-06-2023 05:30

Errors

Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\Sounds\Drivers\NNSHttps\NNSHttps.exe command="C:\Users\Admin\AppData\Local\Temp\Sounds\Drivers\NNSHttps\NNSHttps.exe" wdir=C:\Users\Admin\AppData\Local\Temp\Sounds\Drivers\NNSHttps Payload error: The %1 application cannot be run in Win32 mode.

General

  • Target

    Sounds/Drivers/NNSHttps/NNSHttps.exe

  • Size

    125KB

  • MD5

    887a6e211601dc15730e5f2d0bf4df30

  • SHA1

    70b505fa302be63507812c9fe1c006a32d0ae075

  • SHA256

    69b8e87b5fd7e86f18a019eb133b91bff2fd7e34314fde4c8f652bd7942017f7

  • SHA512

    4b793c0d6dba2490c325616dc3d656c755edd4c295953486657576fb0c1719df8e6147762e485463637f4433fa7d0c3492ff055bde2867f392fa4a6e38048990

  • SSDEEP

    3072:zDW3zAoNcfLpGv6gP/CJ+K8ni+cEMRjxJb:HWjAo+fLpsLPPhU

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\Sounds\Drivers\NNSHttps\NNSHttps.exe
    "C:\Users\Admin\AppData\Local\Temp\Sounds\Drivers\NNSHttps\NNSHttps.exe"
    1⤵
      PID:4592

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4592-133-0x0000000000010000-0x0000000000032000-memory.dmp
      Filesize

      136KB