1eb4db65ad70c914b2f5690d3ea5a3710578a60209780d228389ca0c305b0057 | Triage

Analysis

max time kernel
142s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
12-03-2024 06:06

Sharing

Report Analysis Logs

General

Target

Help/VideoGet.chm
Size

136KB
MD5

1caf13a7f712d2ea3c59bcc0bd52c7d5
SHA1

a44b121b5a2ebe9ee2ec5de645247fd2509470b8
SHA256

a4029adbde1e8ffa643cbd88fdd8f8965ff61fc973eba7abe8adece1f7b683b6
SHA512

8f76cdd66374a730c41437ea3a2343bcc10ac63c14c6af1cc3519d70127144e2bc5d28fb229d4bf4e7cf1eca0bd92f5fb2d26ba23f6f5ec45ae22d319a4d75ca
SSDEEP

3072:tjBnuTCdG/mTFxmHPQGeuKY2V4Qvj2Yf3uXDhtywkwozhG74O35a:tjVuCdGO5xmHUjff3+htyllk74OA

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4876	hh.exe
4876	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\Help\VideoGet.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:4876

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1380 --field-trial-handle=2496,i,15897292497548307209,13920214570023230813,262144 --variations-seed-version /prefetch:8
1⤵
PID:1852

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads