Overview
overview
3Static
static
3bin/advpack.dll
windows10-2004-x64
3bin/advpack.dll
windows11-21h2-x64
3bin/cnvcnt.dll
windows10-2004-x64
3bin/cnvcnt.dll
windows11-21h2-x64
3bin/cnvtoc.dll
windows10-2004-x64
3bin/cnvtoc.dll
windows11-21h2-x64
3bin/flash.exe
windows10-2004-x64
3bin/flash.exe
windows11-21h2-x64
3bin/gencnv.dll
windows10-2004-x64
3bin/gencnv.dll
windows11-21h2-x64
3bin/hha.dll
windows10-2004-x64
3bin/hha.dll
windows11-21h2-x64
3bin/hhc.exe
windows10-2004-x64
3bin/hhc.exe
windows11-21h2-x64
3bin/hhcout.dll
windows10-2004-x64
3bin/hhcout.dll
windows11-21h2-x64
3bin/hhkout.dll
windows10-2004-x64
3bin/hhkout.dll
windows11-21h2-x64
3bin/hhw.exe
windows10-2004-x64
3bin/hhw.exe
windows11-21h2-x64
3bin/iconv.dll
windows10-2004-x64
3bin/iconv.dll
windows11-21h2-x64
3bin/iconv.exe
windows10-2004-x64
3bin/iconv.exe
windows11-21h2-x64
3bin/itcc.dll
windows10-2004-x64
3bin/itcc.dll
windows11-21h2-x64
3bin/libexslt.dll
windows10-2004-x64
3bin/libexslt.dll
windows11-21h2-x64
3bin/libxml2.dll
windows10-2004-x64
3bin/libxml2.dll
windows11-21h2-x64
3bin/libxslt.dll
windows10-2004-x64
3bin/libxslt.dll
windows11-21h2-x64
3Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
20/04/2026, 12:24
Static task
static1
Behavioral task
behavioral1
Sample
bin/advpack.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral2
Sample
bin/advpack.dll
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
bin/cnvcnt.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral4
Sample
bin/cnvcnt.dll
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
bin/cnvtoc.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral6
Sample
bin/cnvtoc.dll
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
bin/flash.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral8
Sample
bin/flash.exe
Resource
win11-20260130-en
Behavioral task
behavioral9
Sample
bin/gencnv.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral10
Sample
bin/gencnv.dll
Resource
win11-20260130-en
Behavioral task
behavioral11
Sample
bin/hha.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral12
Sample
bin/hha.dll
Resource
win11-20260130-en
Behavioral task
behavioral13
Sample
bin/hhc.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral14
Sample
bin/hhc.exe
Resource
win11-20260130-en
Behavioral task
behavioral15
Sample
bin/hhcout.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral16
Sample
bin/hhcout.dll
Resource
win11-20260130-en
Behavioral task
behavioral17
Sample
bin/hhkout.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral18
Sample
bin/hhkout.dll
Resource
win11-20260130-en
Behavioral task
behavioral19
Sample
bin/hhw.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral20
Sample
bin/hhw.exe
Resource
win11-20260130-en
Behavioral task
behavioral21
Sample
bin/iconv.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral22
Sample
bin/iconv.dll
Resource
win11-20260130-en
Behavioral task
behavioral23
Sample
bin/iconv.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral24
Sample
bin/iconv.exe
Resource
win11-20260130-en
Behavioral task
behavioral25
Sample
bin/itcc.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral26
Sample
bin/itcc.dll
Resource
win11-20260130-en
Behavioral task
behavioral27
Sample
bin/libexslt.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral28
Sample
bin/libexslt.dll
Resource
win11-20260130-en
Behavioral task
behavioral29
Sample
bin/libxml2.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral30
Sample
bin/libxml2.dll
Resource
win11-20260130-en
Behavioral task
behavioral31
Sample
bin/libxslt.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral32
Sample
bin/libxslt.dll
Resource
win11-20260130-en
General
- Target bin/hhc.exe
- Size 50KB
- Sample260420-pldjeah14l
- SHA256 3e96894609819ae3d595ff6e0fbe9ce6c9ac17bdeda256b994831992f668cb99
- MD5 7a7935b7bde566ac60b5ef995b9daf83
- SHA1 0cd6bdba0b73eb5e26780b3dfc09d32015aac35f
- SHA512 a21dca1af5e7707f431760ed8dbe618d515d19149992e79673850b45ab7b8476591f7c8901129cfb7effe64b6515cbdf5fb11d6bedaa26e29230e2a9237b2590
- SSDEEP 768:Zb6dZtmPN79giyntnMq59ZyTj5s1RaDX07KOxzdbveEK0iL:h61ONKi+tndPhRAuNdidh
- TLSH T16533194BFA91C1B1D895827904A2DBBA9133FD3147A356CBD3803D3EAD33AE1593964C
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language hhc.exe - Checks processor information in registry 2 TTPs 1 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1 hhc.exe