Analysis
-
max time kernel
137s -
max time network
106s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
21/08/2024, 15:13
Behavioral task
behavioral1
Sample
nk2view.chm
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
nk2view.chm
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
nk2view.exe
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
nk2view.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
新云软件.url
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
新云软件.url
Resource
win10v2004-20240802-en
General
-
Target
nk2view.chm
-
Size
14KB
-
MD5
2ce7fc93ceec113a437d7e4cc2e7bf34
-
SHA1
cf5be4ffd194834c93f52dd6b33813d8f63d9d9a
-
SHA256
ead503787c37ed8b33a4946d8ab4428ffc450b3982d99dd0e51016f12743fb2a
-
SHA512
ef8ca9ff3f13874208581f49da4b88b4dbf9bde0328f92cb036da9c51f3faf521096918a9cf35d8f94f2afefc02425db516b2b4c4b0d4f57f970cab795759cf8
-
SSDEEP
192:ygPHd1mi9hXpqc1sQ4/uQQFZLGXFPvAHR:ygPdplp7sRufrKXx8
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4928 hh.exe 4928 hh.exe