3c016adc1f9eb00be9e640014e53ebc9dcd01e934c8cafed54de6249ea82901d | Triage

Analysis

max time kernel
1800s
max time network
1487s
platform
windows11-21h2_x64
resource
win11-20241007-en
resource tags

arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
submitted
12-10-2024 16:06

Sharing

Report Analysis Logs

General

Target

Help/nvcpl/nvcplcht.chm
Size

132KB
MD5

a444e5df31f2f05a06cafcb761cf5884
SHA1

aee7372d8c5bd53907e9f9987325ff4a95670906
SHA256

ba6b7934709e72f2072453f2b4dc49e82d49ced31ff6336775c8fd84b9e69ea8
SHA512

16d0ce9aeaf1b56755a55032930569b9df65139e13e31172ecac8d5d1ad930b5cb01fee6e059d22ff7b52f25f83b02e6fe14fc00b7137c259b1e4c874cc82642
SSDEEP

3072:7eCEyRrTXWGMLykVepzlcTIMo6yTasgwob2Qj7wL2S0:7eCE4PXP8bVepZxMnyT4woS87wL2F

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2052	hh.exe
2052	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\Help\nvcpl\nvcplcht.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:2052

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads