daaaf8f57839df3645b9a65a3223483c5ff9b01840e179242158d1b8a948a801 | Triage

Analysis

max time kernel
150s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
24-11-2024 00:00

Sharing

Report Analysis Logs

General

Target

Spy Monitor Help.chm
Size

823KB
MD5

c1a92ea144b2321d57979bf1be07b7d5
SHA1

2949c9d0725469eabbf167eb182d6e7a06c79f3e
SHA256

d81c7f1cf52046585784fc104edc8827f4c9b1ccdc625bb127cd568fe8cb54ba
SHA512

402bf88004d4a492efb952a1c161357b2abd41385c6cfe6b11dcf6016ea8904f6655764858c68e98941692866c7f2b583350001905a1f8d691bfb0445a64a99a
SSDEEP

24576:UTWxO7EfOD/jvRQJc2TDIjosMTdpRXzLz:UxHDbRMcwDIjJMTdLz

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

hh.exe

pid process

1408 hh.exe
1408 hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" "C:\Users\Admin\AppData\Local\Temp\Spy Monitor Help.chm"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1408

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads