afe4c1ac48c58f0671f15c3741e7e822d4f84fb99d05e14117005cc80912bcf6 | Triage

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
11/08/2024, 14:16

Sharing

Report Analysis Logs

General

Target

$PROGRAMFILES/ngsrv/lang/howto.chm
Size

13KB
MD5

3450f5afc2270974bd870792f6c64de4
SHA1

c75f894451db9fec2886b6d41f761aec6f62e540
SHA256

3f15402af2bf905fca59876450cdb6091d4a6d8eff9490a0c9a3ae48871aaa11
SHA512

732875465c4427b232061803b37dce28fbc384c6c46c95aea758be6e838043917a3f367f3245e633974d614cda331f113b359617324d8d546dd346e0c65d1cab
SSDEEP

192:PQ2AcTiSku9GN+roq4yft3oEyJjNjgG6NDY5e1E:P1AQroqDtOjNj0NDfE

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
552	hh.exe
552	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\$PROGRAMFILES\ngsrv\lang\howto.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:552

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads