Overview

overview

8

Static

static

3

ArmDot 202...on.rar

windows11-ltsc_2024-x64

8

ArmDot 202...ys.dll

windows11-ltsc_2024-x64

6

ArmDot 202...nt.dll

windows11-ltsc_2024-x64

6

ArmDot 202...re.dll

windows11-ltsc_2024-x64

6

ArmDot 202...ne.dll

windows11-ltsc_2024-x64

1

ArmDot 202...ed.dll

windows11-ltsc_2024-x64

6

ArmDot 202...ot.chm

windows11-ltsc_2024-x64

1

ArmDot 202...ot.exe

windows11-ltsc_2024-x64

3

ArmDot 202...le.exe

windows11-ltsc_2024-x64

6

ArmDot 202...ed.dll

windows11-ltsc_2024-x64

1

ArmDot 202...ge.url

windows11-ltsc_2024-x64

1

ArmDot 202...db.dll

windows11-ltsc_2024-x64

1

ArmDot 202...ks.dll

windows11-ltsc_2024-x64

1

ArmDot 202...il.dll

windows11-ltsc_2024-x64

1

ArmDot 202...on.dll

windows11-ltsc_2024-x64

1

ArmDot 202...se.url

windows11-ltsc_2024-x64

1

ArmDot 202...rt.url

windows11-ltsc_2024-x64

1

ArmDot 202...al.url

windows11-ltsc_2024-x64

1

ArmDot 202...og.txt

windows11-ltsc_2024-x64

8

ArmDot 202...en.ps1

windows11-ltsc_2024-x64

3

ArmDot 202...en.sln

windows11-ltsc_2024-x64

3

ArmDot 202...cxproj

windows11-ltsc_2024-x64

3

ArmDot 202...ilters

windows11-ltsc_2024-x64

3

ArmDot 202...en.php

windows11-ltsc_2024-x64

3

ArmDot 202...se.txt

windows11-ltsc_2024-x64

1

Analysis

  • geolocation tags

    eueuropelondonukunited-kingdom
  • max time kernel
    599s
  • max time network
    464s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    11/07/2026, 02:55

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    ArmDot 2026 Latest Version/ArmDot 2026/ArmDot.chm
  • Size 2.3MB
  • Sample260711-devcssay2j
  • SHA256 340448d568c223e72a816fa18acecd44d7a63800279c8c0478a231e276f2794d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Windows\hh.exe
    "C:\Windows\hh.exe" "C:\Users\Admin\AppData\Local\Temp\ArmDot 2026 Latest Version\ArmDot 2026\ArmDot.chm"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4980
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k GPSvcGroup
    1⤵
      PID:1876

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads