Overview

overview

3

Static

static

3

Setup_Pswrd_1234.rar

windows11-21h2-x64

3

Help/en-US...ts.rtf

windows11-21h2-x64

1

Help/nvcpl/nv3d.chm

windows11-21h2-x64

1

Help/nvcpl...ra.chm

windows11-21h2-x64

1

Help/nvcpl...hs.chm

windows11-21h2-x64

1

Help/nvcpl...ht.chm

windows11-21h2-x64

1

Help/nvcpl...sy.chm

windows11-21h2-x64

1

Help/nvcpl...an.chm

windows11-21h2-x64

1

Help/nvcpl...eu.chm

windows11-21h2-x64

1

Help/nvcpl...ll.chm

windows11-21h2-x64

1

Help/nvcpl...ng.chm

windows11-21h2-x64

1

Help/nvcpl...sm.chm

windows11-21h2-x64

1

Help/nvcpl...sn.chm

windows11-21h2-x64

1

Help/nvcpl...in.chm

windows11-21h2-x64

1

Help/nvcpl...ra.chm

windows11-21h2-x64

1

Help/nvcpl...eb.chm

windows11-21h2-x64

1

Help/nvcpl...un.chm

windows11-21h2-x64

1

Help/nvcpl...ta.chm

windows11-21h2-x64

1

Help/nvcpl...pn.chm

windows11-21h2-x64

1

Help/nvcpl...or.chm

windows11-21h2-x64

1

Help/nvcpl...ld.chm

windows11-21h2-x64

1

Help/nvcpl...or.chm

windows11-21h2-x64

1

Help/nvcpl...lk.chm

windows11-21h2-x64

1

Help/nvcpl...tb.chm

windows11-21h2-x64

1

Help/nvcpl...tg.chm

windows11-21h2-x64

1

Help/nvcpl...us.chm

windows11-21h2-x64

1

Help/nvcpl...ky.chm

windows11-21h2-x64

1

Help/nvcpl...lv.chm

windows11-21h2-x64

1

Help/nvcpl...ve.chm

windows11-21h2-x64

1

Help/nvcpl...ha.chm

windows11-21h2-x64

1

Help/nvcpl...rk.chm

windows11-21h2-x64

1

Help/nvcpl/nvcpl.chm

windows11-21h2-x64

1

Resubmissions

20/02/2024, 16:33 UTC

240220-t2xz7sbd71 3

Analysis

  • max time kernel
    150s
  • max time network
    90s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240214-en
  • resource tags

    arch:x64arch:x86image:win11-20240214-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    20/02/2024, 16:33 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Help/nvcpl/nv3dita.chm

  • Size

    172KB

  • MD5

    046bd8e4893c7462b1384a099115398d

  • SHA1

    0fd7be5c40ea7013a44ddc3d03ac35a8a759d98c

  • SHA256

    5abffaea028628ea376512e29ef852308cbfd76e142029b93b09187cff33fa27

  • SHA512

    3a8527603b0026e1d03e54e9514e39e7470877ca790dcee34f30e6ae64de058a98c4e1bfe6891eff3ea720af787b1e988979021eacb7b15c67a6cfe1d1965bdb

  • SSDEEP

    3072:vOdDBHzoEV6ev4V1SI1/tidLAeHh/dS0xMBBhncqF3wxxQExuTQ4xd9N:vOHHzo86evY1SIWdbh/d3MBBhn3JwxxC

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Windows\hh.exe
    "C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\Help\nvcpl\nv3dita.chm
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1748

Network

  • flag-us
    DNS
    8.8.8.8.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    8.8.8.8.in-addr.arpa
    IN PTR
    Response
    8.8.8.8.in-addr.arpa
    IN PTR
    dnsgoogle
No results found
  • 8.8.8.8:53
    8.8.8.8.in-addr.arpa
    dns
    66 B
     90 B
     1
    1

    DNS Request

    8.8.8.8.in-addr.arpa

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.