5071b54669bb1e88422c6c340204b0b3a0ffd07e2ac1d747ccbd1447abc92948 | Triage

Analysis

max time kernel
143s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20231025-en
resource tags

arch:x64arch:x86image:win10v2004-20231025-enlocale:en-usos:windows10-2004-x64system
submitted
29/10/2023, 15:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

NirCmd.chm
Size

45KB
MD5

4e796f81fc6f1078c08e93d006d24e7a
SHA1

012fb4e3c3ad1d6319f2f297a907dcaa8bbac351
SHA256

95236b65b79287ea0ff9eed030297d71668f2700b3f3d41cf135db96db9d0dad
SHA512

36e756d626f2c5b926e60e344c556c9abeac832b4b78996bbbbe23dd9dd4820f1c91b038e684c2031029492c67ec75d810485381e9efe5afb54b6b9bcaf9852f
SSDEEP

768:tSoC5Dc9JOMw/ZanSKH8MUi8X83NxExx4mPNGzvzKSK7o5eKDWmyx1:tSoMDc9JZfnSQ8XoxqJPMzvZsAvyx1

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4460	hh.exe
4460	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\NirCmd.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:4460

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads