9c93cd60a6108167da782ab136db0779f684b4a6cfbf6e9ac570a66c31431ac2 | Triage

Analysis

max time kernel
140s
max time network
125s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
08-05-2024 20:08

Sharing

Report Analysis Logs

General

Target

HZDHelper.exe
Size

875KB
MD5

4e91a30bf7a5a4626fc4bcf5e76046ab
SHA1

3410c5638fe87a1182558b682fa72553b1696dad
SHA256

ae8104ebe466f286f676d37d78da2e742ea833fa3fd83c68a478ec38ce61c2a5
SHA512

36032c991c4ac36117f6118f4d5421ca67723aaea870d74f76312a0ec86f94d089f435d5f66080a99a1a099d01d73af6f190079dbdd2d2915dd794675208712c
SSDEEP

24576:4mlA4EQ667LOEkrM+qdM3TGlaeShahMUVZuvQmo:4my4EQ6Vqu3TkwhahMU/uvQmo

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

HZDHelper.exe

pid process

1660 HZDHelper.exe
1660 HZDHelper.exe
1660 HZDHelper.exe
1660 HZDHelper.exe

C:\Users\Admin\AppData\Local\Temp\HZDHelper.exe
"C:\Users\Admin\AppData\Local\Temp\HZDHelper.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1660

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1660-0-0x000000006FFF0000-0x0000000070000000-memory.dmp

Filesize
64KB

Download