2177c05b9d345994c968639d176bae2cf1f61b2a08ce49229023a66a3b96b315 | Triage

Resubmissions

20/02/2024, 16:33

240220-t2xz7sbd71 3

Analysis

max time kernel
151s
max time network
156s
platform
windows11-21h2_x64
resource
win11-20240214-en
resource tags

arch:x64arch:x86image:win11-20240214-enlocale:en-usos:windows11-21h2-x64system
submitted
20/02/2024, 16:33

Sharing

Report Analysis Logs

General

Target

Help/nvcpl/nv3desm.chm
Size

152KB
MD5

b7835b96f85d64987c6f4e3f31d839ad
SHA1

74e2d9d11cc07f7be8c973709cb706df42141d85
SHA256

4d50a06d7f04fe32378fa237a9c0ea3b352096a39115d6cd540e73ead6b3bb37
SHA512

7c542e20c5a06012eb40d2ca9afbbeb95f2ac1e7039593caa5ab56687db3efb25c4a0afc4bf03447676ac082460176450007cba86c317e0593fccce716633521
SSDEEP

3072:MTogwY4zUvyhAI0o89AO/JuT5FcPUHU6ULUu+slUv:4CrzUKhN0o8zJuT50WU3yslG

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
348	hh.exe
348	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\Help\nvcpl\nv3desm.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:348

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads