3c016adc1f9eb00be9e640014e53ebc9dcd01e934c8cafed54de6249ea82901d | Triage

Analysis

max time kernel
1800s
max time network
1480s
platform
windows11-21h2_x64
resource
win11-20241007-en
resource tags

arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
submitted
12-10-2024 16:06

Sharing

Report Analysis Logs

General

Target

Help/nvcpl/nvcplara.chm
Size

133KB
MD5

3574e4ce85d6fcc19c3e321e363a9b06
SHA1

1fd47f38ba7e849e397509d64c5edb63734e1be8
SHA256

ca09913bea3dcd84c9e6c70de336129a52fd5b163cccef6d96e33ff80a3fb7ae
SHA512

76894e71dbad0306f619771db996762758841df26871dc0619ff3764b7d9665aaf2e744e6f8b473ac1b528aafb5e6d29ec6d29bd5423a13cf7bdc6189cce4a1e
SSDEEP

3072:ZNot04GSuOzsvA6o/o2x0szKIDdRsi1LrclOzC1EL:ZNyNGSVZPWszKIDsi1LrcYGmL

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3604	hh.exe
3604	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\Help\nvcpl\nvcplara.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:3604

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads