62ca15e1aeee9330d60afa214ff43484335944d44e698797de4fcaef41c8aeb3 | Triage

Analysis

max time kernel
1800s
max time network
1497s
platform
windows11-21h2_x64
resource
win11-20240419-en
resource tags

arch:x64arch:x86image:win11-20240419-enlocale:en-usos:windows11-21h2-x64system
submitted
06/05/2024, 00:52

Sharing

Report Analysis Logs

General

Target

Updates/nvcpl/nvcpldan.chm
Size

130KB
MD5

5449d599095d008ec1c19e04e60777e9
SHA1

bb69f851bcdb0ef8706e68a3dbd86573af1874fe
SHA256

a042945436ae9e9d3191864eb0893aac44b107e2ad23b4061351fbdbc289a216
SHA512

9247aec18a2777bce38aa87bdf0106d5a6f886f5c12ab5484330aa725ccf59e405bd8a489774b051ae9b9ecb645c04a7d109333288daaf81f30a07cf2ee7a1bd
SSDEEP

3072:upAHVBuTtXgpuAl0Syg2FJsJFuT+L5gEBCN9+kQBq:upACOu20Syg2Fr85gEQfJ5

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3528	hh.exe
3528	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\Updates\nvcpl\nvcpldan.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:3528

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads