4b1c601201a75f09ffc9f37d932c03b3a4b81635f69207b1cfee441f8a1eec04

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
18/04/2026, 04:57

Target
AM-DeadLink/deadlink.chm
Size 25KB
Sample260418-flgrdsgz91
SHA256 4b1c601201a75f09ffc9f37d932c03b3a4b81635f69207b1cfee441f8a1eec04
MD5 fc36490c3ff23eba7d6a374bebf77155
SHA1 101e574f96819a9cc025b91d8701d1dab324186f
SHA512 cef115fbe5b984bc6db631c5db71c74c5a65ae94f0e80edc2145cfe55b6ed21d9a7c045f40d8ef98f9114bae52066a100c2499fe1f5362426fdb1486da3c7478
SSDEEP 384:BpWCXaTJfm5qnx77peNim6PS88W1904K3O50CUoCd4WqxdR:BpWOaTJMqxf8GPS8NYm1UogCxdR
TLSH
T182B2D0D87A748121C75D6837CFD6EA98E2005E066AF0F36214FC932E12F4E547B7686C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
312	hh.exe
312	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\AM-DeadLink\deadlink.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:312