Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
15/09/2024, 00:27
Behavioral task
behavioral1
Sample
DLLExportViewer-v1.22/dllexp.chm
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
DLLExportViewer-v1.22/dllexp.chm
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
DLLExportViewer-v1.22/dllexp.exe
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
DLLExportViewer-v1.22/dllexp.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
DLLExportViewer-v1.22/新云软件.url
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
DLLExportViewer-v1.22/新云软件.url
Resource
win10v2004-20240802-en
General
-
Target
DLLExportViewer-v1.22/dllexp.chm
-
Size
14KB
-
MD5
866eeaf31048da20461fc47ed1c416f4
-
SHA1
32634cc54f364c026759548f80eb9833986a8fae
-
SHA256
d1b24920a360e0a513233957210abc10e48a352798d7c6a662643704432159f4
-
SHA512
9ad70ed34f71ef147c3b761a79db91a193328f23622d0e05f5eca396b4832346a42834afc16362b653f8b0e3b5bca0eb52dd242438da92f2f9dd37de0c2535f5
-
SSDEEP
192:6B55LpU1+iO6Tgr5oWbYRJkhO1w6RS7k2jp8T1uBXD:6B5Xjcgr5oWbMWhO15RZiW1uBX
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 5092 hh.exe 5092 hh.exe