62ca15e1aeee9330d60afa214ff43484335944d44e698797de4fcaef41c8aeb3 | Triage

Analysis

max time kernel
1800s
max time network
1498s
platform
windows11-21h2_x64
resource
win11-20240419-en
resource tags

arch:x64arch:x86image:win11-20240419-enlocale:en-usos:windows11-21h2-x64system
submitted
06-05-2024 00:52

Sharing

Report Analysis Logs

General

Target

Updates/nvcpl/nvcplara.chm
Size

133KB
MD5

3574e4ce85d6fcc19c3e321e363a9b06
SHA1

1fd47f38ba7e849e397509d64c5edb63734e1be8
SHA256

ca09913bea3dcd84c9e6c70de336129a52fd5b163cccef6d96e33ff80a3fb7ae
SHA512

76894e71dbad0306f619771db996762758841df26871dc0619ff3764b7d9665aaf2e744e6f8b473ac1b528aafb5e6d29ec6d29bd5423a13cf7bdc6189cce4a1e
SSDEEP

3072:ZNot04GSuOzsvA6o/o2x0szKIDdRsi1LrclOzC1EL:ZNyNGSVZPWszKIDsi1LrcYGmL

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2912	hh.exe
2912	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\Updates\nvcpl\nvcplara.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:2912

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads