62ca15e1aeee9330d60afa214ff43484335944d44e698797de4fcaef41c8aeb3 | Triage

Analysis

max time kernel
1800s
max time network
1496s
platform
windows11-21h2_x64
resource
win11-20240419-en
resource tags

arch:x64arch:x86image:win11-20240419-enlocale:en-usos:windows11-21h2-x64system
submitted
06-05-2024 00:52

Sharing

Report Analysis Logs

General

Target

Updates/nvcpl/nvcpljpn.chm
Size

139KB
MD5

313156d6e8ad2dea9d60f77dd43c0478
SHA1

2e02359285a69b186318540f67848f963fa63664
SHA256

9a3180670a938691960edd9f4c905e4704eed9e82403c99ebef060e5a4454564
SHA512

07d3864a22d0be4f7c14acc765cef10ef0e4620feaa9fe24d0e5f56c54f0f21ae0600461eb864b92471affff0794b476d38c9a9243098e82ee475c948fabff80
SSDEEP

3072:dIrxyseFhsF1SG4phmMKK/iT+bRufTp3fku5z:dIr6rsFav/iq0f9Pk2

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3444	hh.exe
3444	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\Updates\nvcpl\nvcpljpn.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:3444

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads