11faa0a2118e251afa9a1bf51466bf31dcba797ea8cb724628de23d953411662 | Triage

Analysis

max time kernel
143s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20231025-en
resource tags

arch:x64arch:x86image:win10v2004-20231025-enlocale:en-usos:windows10-2004-x64system
submitted
24-11-2023 10:00

Sharing

Report Analysis Logs

General

Target

BulkFileChanger.chm
Size

65KB
MD5

7c9b2e70d38a336d15ac544d5dba1de6
SHA1

49fcad8863d1b64daa005977235bee9edc871af1
SHA256

9cf91989a981e923ffc61d05e233d7787680708cdd707bd0d7d4d41e76e2d1b9
SHA512

826f7eb501b86bcbb4c8310896a50357ff8a7575c703c3c69cbc79d0e1f68631ecd6d15c55b376a2f5311d79f6d17f7cf1412e1e71fec0b2aefaee7986655ae2
SSDEEP

1536:NGUesMfURS6hWZ/UQQw0LF31TrUQ4zkfuwanx0xIzD:cUM1X/Yl1x4wfuBnGE

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
5100	hh.exe
5100	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\BulkFileChanger.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:5100

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads