Analysis
-
max time kernel
140s -
max time network
110s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
17/05/2024, 17:36
General
-
Target
Updates/nvcpl/nvmobell.chm
-
Size
50KB
-
MD5
e137e9190c75b43a0096ce04b0d59618
-
SHA1
9e172805c1d04d5d6fedfef493442b03942ccca9
-
SHA256
bc8f84bac3ce10c3073955148c3e7b68a9fd32b1036dfd56ed2ec89024c0f982
-
SHA512
ec5903fa7470327d65fdcfec943e1383dbcfb22b219ae9312b0c22e77d85606dde39ad2afe9e96afc31bd341eeaff0ccf8412d3a67e6271c4892b77732a4f329
-
SSDEEP
768:pjsJn7ApBOpcApPy97cTT0lcyBJroMWxIdZ6Vsh5R+Ptc+csb:pjIc7ScAhSwUcoJrzaIj6VWTVLsb
Score
1/10
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Windows\hh.exe"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\Updates\nvcpl\nvmobell.chm1⤵
- Suspicious use of SetWindowsHookEx