8b20c4f222723037b9df600a444b358820f9aa1e51c8e9553cb5465859f9d325

Analysis

max time kernel
0s
max time network
19s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
10-06-2023 05:30

Sharing

Reason

platform exec: image=C:\Users\Admin\AppData\Local\Temp\Sounds\Drivers\NNSIds\WVista\NNSIds.exe command="C:\Users\Admin\AppData\Local\Temp\Sounds\Drivers\NNSIds\WVista\NNSIds.exe" wdir=C:\Users\Admin\AppData\Local\Temp\Sounds\Drivers\NNSIds\WVista Payload error: The %1 application cannot be run in Win32 mode.

Report Analysis Logs

General

Target

Sounds/Drivers/NNSIds/WVista/NNSIds.exe
Size

142KB
MD5

62802a135bdf46b22f35c9905421f3b3
SHA1

17929073f24c768cd6084d2ec89ca3e4efec5d6d
SHA256

25c73bca17db04f9539bb2b4b5e718c2876ac9770606acfda92476879eae671e
SHA512

4acbc8b09e767b4a4abcd4bfbd73543f6f70195af34aa6b2b18e1f3b72e567d450be15ef3fa897353183623ec1108d8df6da8bf0c0f0386733cc760d3e3d4a1e
SSDEEP

3072:ucetm3VYt+DQLYfjHQQ17gc1VPDkTl6B5xJ:ucetm3VYtdsJ7bgi

Score

1^/10

Malware Config

Signatures

C:\Users\Admin\AppData\Local\Temp\Sounds\Drivers\NNSIds\WVista\NNSIds.exe
"C:\Users\Admin\AppData\Local\Temp\Sounds\Drivers\NNSIds\WVista\NNSIds.exe"
1⤵
PID:5076

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/5076-133-0x0000000000010000-0x000000000003E000-memory.dmp

Filesize
184KB

Download