5d254ac1eb881ee492264f1d41e7c59b74275285c18b786379d94dfd175baca6 | Triage

Analysis

max time kernel
124s
max time network
128s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
27/09/2024, 12:05

Sharing

Report Analysis Logs

General

Target

WinTools.net Ultimate/Help/german.chm
Size

33KB
MD5

60f4a2142e05e9f9ef1d0687f340ab81
SHA1

d361d79c6a8011dd676eb6f9f377c3fc35b1bcb1
SHA256

73930fa29130562c855afa83aea1f789c64cc2bebc3360c246d24eb812647d81
SHA512

b4ab5a6ba85b9d61073bc5389dacab8b665bf86a857a6a9b57bfe8d44f392cefdac9c5c736d24a26b5b23eb539eb865353fe8b0de2cfc2df1d736cfc4527573f
SSDEEP

768:H8cLyVs0UENcF3RCQm79QXL+sdBlz4+evht73wmc:H89VYENcF3REoLvB1o7A7

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4884	hh.exe
4884	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" "C:\Users\Admin\AppData\Local\Temp\WinTools.net Ultimate\Help\german.chm"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4884

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=1012,i,3861745594156495651,17595114179815238301,262144 --variations-seed-version --mojo-platform-channel-handle=1408 /prefetch:8
1⤵
PID:1612

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads