f4863baa692b6e9277cdfc1108273d109e08667d0e273313ec7184acef6ffe4e

Analysis

max time kernel
93s
max time network
101s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
13/06/2024, 09:13

Target
f4863baa692b6e9277cdfc1108273d109e08667d0e273313ec7184acef6ffe4e.chm
Size 1.8MB
Sample240613-k6rvbawemp
SHA256 f4863baa692b6e9277cdfc1108273d109e08667d0e273313ec7184acef6ffe4e
MD5 4b76ce629a1ae8ee2c05443bf1c89732
SHA1 5d6eb0b165d9404e40ee011885c1ebae7f4f443f
SHA512 eb108bda11bbc1ea4bc905d82cde8f2fc3f23ce3617dfcd991544408b099ed26206625db137536a566eb7c11ea2b7175f21fb2e904a9ffccbacc35b18f044124
SSDEEP 49152:2cDp8RG8HCqSRXUs/R3AERKARj7PsekcPSdCvK+rFEZlXym:DV2Gm6XjR3Acp8cPkCvfFEZUm
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4736	hh.exe
4736	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\f4863baa692b6e9277cdfc1108273d109e08667d0e273313ec7184acef6ffe4e.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:4736