3c016adc1f9eb00be9e640014e53ebc9dcd01e934c8cafed54de6249ea82901d | Triage

Analysis

max time kernel
1800s
max time network
1493s
platform
windows11-21h2_x64
resource
win11-20241007-en
resource tags

arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
submitted
12-10-2024 16:06

Sharing

Report Analysis Logs

General

Target

Help/nvcpl/nvcpl.chm
Size

130KB
MD5

8c46e168c5c04410c039917f37f4b7d6
SHA1

de9c3a5a4ed3ddad765e2243381e8413846a87ac
SHA256

5274f8740ede13ab0132b8552efa195407577db7e8f785a56d60d0aa64b3f067
SHA512

ba930f3573947bceb87fe7b7ca58a5af1b7f0c466a6b12543af5fe71f45a352da0d3e58f469b2681e6d2ecf923a96647f3dabfafcb66537d6a6ef4e0dc4317e8
SSDEEP

3072:WhrcemGg8C3jfzGOZDq/wIjjTdG2YwqfVYX4qVJb+eyZNTN/:06NFT7NY/lNGhTqoqVJbHyzF

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3340	hh.exe
3340	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\Help\nvcpl\nvcpl.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:3340

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads