8b20c4f222723037b9df600a444b358820f9aa1e51c8e9553cb5465859f9d325

Analysis

max time kernel
8s
max time network
18s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
10-06-2023 05:30

Sharing

Reason

platform exec: image=C:\Users\Admin\AppData\Local\Temp\Sounds\Drivers\NNSDhcp\WVista\NNSDhcp.exe command="C:\Users\Admin\AppData\Local\Temp\Sounds\Drivers\NNSDhcp\WVista\NNSDhcp.exe" wdir=C:\Users\Admin\AppData\Local\Temp\Sounds\Drivers\NNSDhcp\WVista Payload error: The %1 application cannot be run in Win32 mode.

Report Analysis Logs

General

Target

Sounds/Drivers/NNSDhcp/WVista/NNSDhcp.exe
Size

108KB
MD5

361fc24cd58434ef7d71b51f18537af0
SHA1

632febef312a3a28866549decde3a2dbf91ae971
SHA256

56559cb8b4ecce9cedf3e85e6928641a01fc86f976eb6d3255d216a9613045b7
SHA512

a285df3a06de9c31fe4202a0ab95d0bfa67454525a148fbac0711b327d5c19176ad627c405c39b515972b14f0d024f1e95fb5adede2d6c8d06a584daa0e37998
SSDEEP

3072:4vbyls/1NB29RvBEPpJBUL8YaFBbqHSxxn:4jylstwpBuo29

Score

1^/10

Malware Config

Signatures

C:\Users\Admin\AppData\Local\Temp\Sounds\Drivers\NNSDhcp\WVista\NNSDhcp.exe
"C:\Users\Admin\AppData\Local\Temp\Sounds\Drivers\NNSDhcp\WVista\NNSDhcp.exe"
1⤵
PID:3524

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3524-133-0x0000000000010000-0x000000000002E000-memory.dmp

Filesize
120KB

Download