9c93cd60a6108167da782ab136db0779f684b4a6cfbf6e9ac570a66c31431ac2 | Triage

Analysis

max time kernel
141s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
08-05-2024 20:08

Sharing

Report Analysis Logs

General

Target

HZDHelper.exe
Size

875KB
MD5

4e91a30bf7a5a4626fc4bcf5e76046ab
SHA1

3410c5638fe87a1182558b682fa72553b1696dad
SHA256

ae8104ebe466f286f676d37d78da2e742ea833fa3fd83c68a478ec38ce61c2a5
SHA512

36032c991c4ac36117f6118f4d5421ca67723aaea870d74f76312a0ec86f94d089f435d5f66080a99a1a099d01d73af6f190079dbdd2d2915dd794675208712c
SSDEEP

24576:4mlA4EQ667LOEkrM+qdM3TGlaeShahMUVZuvQmo:4my4EQ6Vqu3TkwhahMU/uvQmo

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

HZDHelper.exe

pid process

5008 HZDHelper.exe
5008 HZDHelper.exe
5008 HZDHelper.exe
5008 HZDHelper.exe

C:\Users\Admin\AppData\Local\Temp\HZDHelper.exe
"C:\Users\Admin\AppData\Local\Temp\HZDHelper.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:5008

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/5008-0-0x000000006FFF0000-0x0000000070000000-memory.dmp

Filesize
64KB

Download
memory/5008-2-0x00000000759D0000-0x00000000759E8000-memory.dmp

Filesize
96KB

Download
memory/5008-1-0x0000000076030000-0x00000000761D0000-memory.dmp

Filesize
1.6MB

Download