Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    20-04-2024 12:34

General

  • Target

    Adobe Activator/Help/nvcpl/nv3dcht.chm

  • Size

    163KB

  • MD5

    cac8a4ed9640b74857a93fb8b77f62e3

  • SHA1

    c214272f9f89b99b44ebc3dafc8c84e3a945495b

  • SHA256

    1b3ae5a0bd843c09ee6662cd7a5f3d5b6f364ebce14afa85b268375df3c9c235

  • SHA512

    eea1cb16aa432e73927fb316f357a021cc10ff3e9e347110e1b6e14995ff07c19425f3d9b73a9b1fd43fe8731488ad4ae767ce2e7e062b5a0d2421d5acc972d4

  • SSDEEP

    3072:Ac/UIB28I0yE5WiOsOtrw8HfgQH8XHsJu0fR3xzTWu8KbjMb+FALzF:ARIB0zE56sONvHfNcXUvZ31qIFALR

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Windows\hh.exe
    "C:\Windows\hh.exe" "C:\Users\Admin\AppData\Local\Temp\Adobe Activator\Help\nvcpl\nv3dcht.chm"
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of SetWindowsHookEx
    PID:2204

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads