8b20c4f222723037b9df600a444b358820f9aa1e51c8e9553cb5465859f9d325

Analysis

max time kernel
4s
max time network
20s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
10-06-2023 05:30

Sharing

Reason

platform exec: image=C:\Users\Admin\AppData\Local\Temp\Sounds\Drivers\NNSPop3\NNSPop3.exe command="C:\Users\Admin\AppData\Local\Temp\Sounds\Drivers\NNSPop3\NNSPop3.exe" wdir=C:\Users\Admin\AppData\Local\Temp\Sounds\Drivers\NNSPop3 Payload error: The %1 application cannot be run in Win32 mode.

Report Analysis Logs

General

Target

Sounds/Drivers/NNSPop3/NNSPop3.exe
Size

134KB
MD5

472e053ca5a4784eb16674d9971d8b32
SHA1

1b5669bc52f405c6649623011dae02f7cfba91f2
SHA256

ff8844bb121bde577f344680c4f6b7441760e4243187e26fe261eb0dabc21bf4
SHA512

1b86d650bc9879c85bcda729b476daa5d14f4e2872d313b5a1f8f31a7e8417e6d1f3921d2ff36851f938c9de4d61766efee8022339cf2e57c2f93e5fd40b0c0c
SSDEEP

3072:0k2RHlIdsxt49agKzw31P4uNNmh1YvQbOR16xwE:0kel9w31P43FZ

Score

1^/10

Malware Config

Signatures

C:\Users\Admin\AppData\Local\Temp\Sounds\Drivers\NNSPop3\NNSPop3.exe
"C:\Users\Admin\AppData\Local\Temp\Sounds\Drivers\NNSPop3\NNSPop3.exe"
1⤵
PID:5048

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/5048-133-0x0000000000010000-0x0000000000036000-memory.dmp

Filesize
152KB

Download