bfe585fde57162ecc54ee3b34d91952b7ad12cbe85bfc923eeeff434815eb0bc

Analysis

max time kernel
148s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
03/06/2024, 11:13

Target
VBAPass.chm
Size 23KB
Sample240603-nbrslscd7w
SHA256 2aab635c4be3fdb85d56d35632396d9260c69e65ea4633bfd3e3c396aa53b965
MD5 03ab84915fbb8cff181ac17a6b09a5f3
SHA1 a5819477b8c91a0b757841a0dcfc6fa04a8f9f33
SHA512 92cad49e981474cff6a1169f26fbaf7146269d4843fb742ba02bfa826d6ff817df5401e4210b0e8a63370cd79c03b822018b70965cae925497abddad043244e8
SSDEEP 384:QPfwkEVdnwPu0FQHBOdz3Z0N0Ns4n3XJPvh0moNe:QPfwkiRHBAZ0Ncs0hZ0ze
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2788	hh.exe
2788	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\VBAPass.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:2788