bc1af5e58bcb412a72e59c142f5a255ba4474c4330e4cdcc6991821a1ec6f383 | Triage

Analysis

max time kernel
103s
max time network
107s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
05/10/2024, 11:02

Sharing

Report Analysis Logs

General

Target

HaoZip.chm
Size

163KB
MD5

74309dc7361642b6f9b796899b467c2b
SHA1

742c190163efd3b594da20754822e556a921b80e
SHA256

82e3dbcf5478eab913373bb2bfb9c464248a1803f5905f0fddd2315297fa5383
SHA512

a1ab71d1ae469c8882ab3281addf3d97a982f873a8f47c10fe930188163bd1bc0ff02cf5cda70bf4d993faea0c3e206daf0b966dae125a5a52d23aa4c74c6943
SSDEEP

3072:mhuIyDjh8PuRCakQzgQlibBqljt54yy20bSxegRoVoaVYlMluR/:m8jSEkQzg42c54c3xJRWpVs/

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4420	hh.exe
4420	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\HaoZip.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:4420

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads