Resubmissions

17/05/2024, 17:36

240517-v61gkaag72 1

17/05/2024, 17:35

240517-v6ceqsaf7y 3

Analysis

  • max time kernel
    138s
  • max time network
    139s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    17/05/2024, 17:36

General

  • Target

    Updates/nvcpl/nvmobrus.chm

  • Size

    49KB

  • MD5

    de861837a60f83b143012314f0a21440

  • SHA1

    d0b109089e0f9d07830ef347107ec69a1d530cde

  • SHA256

    3d5386d471ff0e0dfe1eb8f4edb080a3c42e949895d045821869ade3bcf202b0

  • SHA512

    bcff0ad0b9be85bb20b687c7b0f73c40aeae873d82d070cbf65e242e07b158f952be566fe5981f63c5ed20112cf526b681b5bcd8138b3780d75635ec07e0686d

  • SSDEEP

    768:R5fDKEWVGwmMp148Ru9da8JZDpStpxr2yKn+H7rAwd+LnI+5lY51:R52EBwfrRu9daU1s2n0kwd+LnIgY51

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Windows\hh.exe
    "C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\Updates\nvcpl\nvmobrus.chm
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4292

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads