3c016adc1f9eb00be9e640014e53ebc9dcd01e934c8cafed54de6249ea82901d | Triage

Analysis

max time kernel
1800s
max time network
1497s
platform
windows11-21h2_x64
resource
win11-20241007-en
resource tags

arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
submitted
12-10-2024 16:06

Sharing

Report Analysis Logs

General

Target

Help/nvcpl/nv3dkor.chm
Size

179KB
MD5

32f13d4a058e08459d971cf4c4b834ea
SHA1

9bcdda89048afd8e10746d19d51dcb7f30ffd142
SHA256

09d6dd19f69509795d778f2fc07cdf7d427e5a037ab3eeb6663de4749f440786
SHA512

09001afa28aafd64be1960ec88e6293b756a09227b93e2157acee7c72c79706d947ee86941553def66250d530d743f711b75bc5132a70877588920ddfc527800
SSDEEP

3072:jeEmkWFPfZ8LLeWqRRFq1sNYN05gEiv51LKB3zcshC6W0Qf5S/aH:jeEifZ8uRPkyUESO9zcsps

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1032	hh.exe
1032	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\Help\nvcpl\nv3dkor.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:1032

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads