62ca15e1aeee9330d60afa214ff43484335944d44e698797de4fcaef41c8aeb3 | Triage

Analysis

max time kernel
1800s
max time network
1497s
platform
windows11-21h2_x64
resource
win11-20240426-en
resource tags

arch:x64arch:x86image:win11-20240426-enlocale:en-usos:windows11-21h2-x64system
submitted
06-05-2024 00:52

Sharing

Report Analysis Logs

General

Target

Updates/nvcpl/nvcplhun.chm
Size

135KB
MD5

de1dd049072ac1895a941913357aa131
SHA1

aac5f3ed64b658bde1284292a85f0bcf3a8e4b60
SHA256

792a9e8572139a073641382f8aa1d3a7d6d1e2a36b5ace7bf6936f7319dc21b7
SHA512

4417275fffe169222c8c7ed2b616ae8814ed8d970e936e8653d5cfb6861bfecbeee96839ca7c2738884cd7bd267614adc5f488ef6161e3806e7dd759894d4f90
SSDEEP

3072:Se2SV3qBduShRfVMhCxn/1CaHQmiNIodwzCPZPf1zAhGxO:SXSV3q6aVwCtjQlNLmuxH18J

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2632	hh.exe
2632	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\Updates\nvcpl\nvcplhun.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:2632

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads