1098010f3cb3ab5df734a5efa41633bcefcb37a3b2ede24b347f089a8fcbcc3e

Resubmissions

19/09/2026, 10:25

19/09/2026, 10:19

max time kernel
149s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
19/09/2026, 10:19

Target
itdrvbg.chm
Size 34KB
Sample260919-mcl33seb29
SHA256 1098010f3cb3ab5df734a5efa41633bcefcb37a3b2ede24b347f089a8fcbcc3e
MD5 a7e7121d85ffba2cdb427139cacaec3e
SHA1 0f349cbb7d637baaafff1c41758ff005650227ec
SHA512 e4c76a951b6d17eeb778ddaf5862e8fba2c9bade09e7fa0d113699322e723deafbae34c6aa1c547ef68229462f958fa98130fe077ea9f2af5c27136175a34366
SSDEEP 768:JzKu9hgj3IsuYWOdtrTlWOdDqObt1JDcb3yYHC:JzKu9hkIBUthOObLe3U
TLSH
T1F2F2D08E6D305130D4E84F333ED36BE46A18AD80D7F6B1243F0EA27584A6B29C5D49F9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2792	hh.exe
2792	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\itdrvbg.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:2792