694a0a4c1eb0b180680efb14257b130c9235b4124053a7487d3910806f09a93c | Triage

Analysis

max time kernel
139s
max time network
160s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
15-05-2024 22:12

Sharing

Report Analysis Logs

General

Target

CodeWizard/CodeWizard.chm
Size

135KB
MD5

2bb6e64a279fcda24cc09a314616457a
SHA1

51f06274c33cd55d5807e590e7b8e1dd369ce87b
SHA256

d454e0cb8ed646fc5b684b77d547fb9ae00022066ebdd9a7739e436a045b9ac3
SHA512

59ffaa6381b6b93339453c1c09dac09570f2fbe23fd7ac5e68659935a1ecb86ff715ee1c98700b6115d6e5612c23df42b8e9f98aafda7713bad24de6e20fd38c
SSDEEP

3072:+5E+SGmR8bpKBXweEkOffwOkaGJCMooi1wRxr3EUPA+mI4bz:+PFb4xwPoO2Ct4jhoR7v

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

hh.exe

pid process

1612 hh.exe
1612 hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\CodeWizard\CodeWizard.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:1612

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1416 --field-trial-handle=3240,i,13319578961094268484,16557498665191861597,262144 --variations-seed-version /prefetch:8
1⤵
PID:3752

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads