Analysis

  • max time kernel
    17s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    10-06-2023 05:30

Errors

Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\Sounds\Drivers\NNSIds\NNSIds.exe command="C:\Users\Admin\AppData\Local\Temp\Sounds\Drivers\NNSIds\NNSIds.exe" wdir=C:\Users\Admin\AppData\Local\Temp\Sounds\Drivers\NNSIds Payload error: The %1 application cannot be run in Win32 mode.

General

  • Target

    Sounds/Drivers/NNSIds/NNSIds.exe

  • Size

    143KB

  • MD5

    e6370604cc9338c40d226d61de6c7d54

  • SHA1

    71d3199a5b417f7a903321c684d084e01c854cd6

  • SHA256

    b14759727200a42b25c4f411e03ff01201f76f35f7d1e2cb59f2c542075a9784

  • SHA512

    0cda50470ed487a68038f14cf483f028882f3e9fc20296d09f1ca6a6680ecaffdcd8751aa50337d067a4f8d219bc16927e4585d8d013dd562214ddca4f67c1c3

  • SSDEEP

    3072:u/etm3VYt+DQLYfjHQQ17gc1VPDkTlISxPs:u/etm3VYtdsJ7bgKt

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\Sounds\Drivers\NNSIds\NNSIds.exe
    "C:\Users\Admin\AppData\Local\Temp\Sounds\Drivers\NNSIds\NNSIds.exe"
    1⤵
      PID:1120

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1120-54-0x0000000000010000-0x000000000003E000-memory.dmp
      Filesize

      184KB