3c016adc1f9eb00be9e640014e53ebc9dcd01e934c8cafed54de6249ea82901d

Analysis

max time kernel
1800s
max time network
1172s
platform
windows11-21h2_x64
resource
win11-20241007-en
resource tags

arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
submitted
12/10/2024, 16:06

Target
Help/nvcpl/nv3deng.chm
Size 157KB
Sample241012-tkkcsayeme
SHA256 1d80c40950a02fe124d5450f0f2a4b177a497607575b4b13eb06debf958b6cea
MD5 3ecd51de3a504eec21d70ccf865d43dd
SHA1 e36dc69365c8316509bde90bcd85379e088689cb
SHA512 7d7753c86f808440641f1d8aef255f787d23eb0af0aea886f0f8d85d994dc8a839f5df2f182e934c3508acbfa06de4a0d430df9076f141084fb1fab53f5d6490
SSDEEP 3072:TrTTUcvjPGlZ2LByOsOKYRprh/tIM10HcYLM127AbK2G51wAe:Tr8rZ3lMpRtjYLM1BLm+Ae
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2036	hh.exe
2036	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\Help\nvcpl\nv3deng.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:2036