b1490584f0a01026786c1dd5fea77dfee5fecdf59fd5050f8f10e687334dd36d | Triage

Resubmissions

17/05/2024, 17:36

240517-v61gkaag72 1

17/05/2024, 17:35

240517-v6ceqsaf7y 3

Analysis

max time kernel
136s
max time network
123s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
17/05/2024, 17:36

Sharing

Report Analysis Logs

General

Target

Updates/nvcpl/nvmobsve.chm
Size

51KB
MD5

d1d035ad67304203270224cad136dd22
SHA1

86181bdc222fc246d74884747fb90200d8484e43
SHA256

77ec18bceab1db45afe4d1e03f0b60e6a53d4f58c2122e38857d3345c771f204
SHA512

648b574bfca4adc3383a913f286f81676b175c5894acfcc4c2bd13b3217591654c467b9481892fb8d076e965ce5e472dca7691b75c1a4bd5032e671f833fe8b4
SSDEEP

1536:9v/LaK7v9hC1duKJ037A53nkm44JzmWkXuC:R/L171cv0rA53544dGX

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
324	hh.exe
324	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\Updates\nvcpl\nvmobsve.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:324

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads