8b20c4f222723037b9df600a444b358820f9aa1e51c8e9553cb5465859f9d325

Analysis

max time kernel
11s
max time network
44s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
10-06-2023 05:30

Sharing

Reason

platform exec: image=C:\Users\Admin\AppData\Local\Temp\Sounds\Drivers\NNSHttps\WVista\NNSHttps.exe command="C:\Users\Admin\AppData\Local\Temp\Sounds\Drivers\NNSHttps\WVista\NNSHttps.exe" wdir=C:\Users\Admin\AppData\Local\Temp\Sounds\Drivers\NNSHttps\WVista Payload error: The %1 application cannot be run in Win32 mode.

Report Analysis Logs

General

Target

Sounds/Drivers/NNSHttps/WVista/NNSHttps.exe
Size

125KB
MD5

1c75e0df00def2030a7ff496a5b945b6
SHA1

79ccc0d74781d2c8bb29578160f6a16f28eaf8ff
SHA256

310eeaf49ff346dbbf07ee4401e1ae60bd2f70c4c6b21abf7cc5a399aa1db5a1
SHA512

33e4eb5e1d48f138cfe7d94390063d92faf37d68f66b1e210c56a7b0bba42475996e0a2858568f4d6c294f39903c21da261c9dcf313a87674ea7d5ad56683070
SSDEEP

3072:XDW3zAoNcfLpGv6gP/CJ+K8ni+cEMRwn9xE:zWjAo+fLpsLPPhS

Score

1^/10

Malware Config

Signatures

C:\Users\Admin\AppData\Local\Temp\Sounds\Drivers\NNSHttps\WVista\NNSHttps.exe
"C:\Users\Admin\AppData\Local\Temp\Sounds\Drivers\NNSHttps\WVista\NNSHttps.exe"
1⤵
PID:1896

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1896-133-0x0000000000010000-0x0000000000032000-memory.dmp

Filesize
136KB

Download