de90231e3c8cca7b7db78f41d0ea04bbc867223fd828de4b29aaafd4822b87d4 | Triage

Analysis

max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
26/07/2024, 04:38

Sharing

Report Analysis Logs

General

Target

PhotoRescue Pro/photorescuepro.chm
Size

459KB
MD5

74accd41b3b3ceb0aeae17ae7b41a766
SHA1

713130ffef4b27b9542a64c5a450e38960e828a0
SHA256

41092e956d76ae54ee9e54d67c8a05c2196a19e144dc47af1f018a8bfcbb660b
SHA512

c348870aa6387f40b951bb80ad799bf7deffcc661de02ee65426e872d3a37b024bc4f2a618c5d1fca30bdf234898afe56c30400ae12542230cc09fa3077cb05a
SSDEEP

12288:NTuGRK3F1UVo+0irAdYV43ho030VF/NgKBfRro7y6:NTVwA9AM4RStx6

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
972	hh.exe
972	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" "C:\Users\Admin\AppData\Local\Temp\PhotoRescue Pro\photorescuepro.chm"
1⤵
- Suspicious use of SetWindowsHookEx
PID:972

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads