3c016adc1f9eb00be9e640014e53ebc9dcd01e934c8cafed54de6249ea82901d | Triage

Analysis

max time kernel
1800s
max time network
1500s
platform
windows11-21h2_x64
resource
win11-20241007-en
resource tags

arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
submitted
12-10-2024 16:06

Sharing

Report Analysis Logs

General

Target

Help/nvcpl/nvcpldan.chm
Size

130KB
MD5

5449d599095d008ec1c19e04e60777e9
SHA1

bb69f851bcdb0ef8706e68a3dbd86573af1874fe
SHA256

a042945436ae9e9d3191864eb0893aac44b107e2ad23b4061351fbdbc289a216
SHA512

9247aec18a2777bce38aa87bdf0106d5a6f886f5c12ab5484330aa725ccf59e405bd8a489774b051ae9b9ecb645c04a7d109333288daaf81f30a07cf2ee7a1bd
SSDEEP

3072:upAHVBuTtXgpuAl0Syg2FJsJFuT+L5gEBCN9+kQBq:upACOu20Syg2Fr85gEQfJ5

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4624	hh.exe
4624	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\Help\nvcpl\nvcpldan.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:4624

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads