Overview
overview
3Static
static
3About/IA2Marshal.dll
windows10-2004-x64
1About/IA2Marshal.dll
windows11-ltsc_2024-x64
1About/Teka...ts.rtf
windows10-2004-x64
1About/Teka...ts.rtf
windows11-ltsc_2024-x64
1About/Teka...nf.chm
windows10-2004-x64
1About/Teka...nf.chm
windows11-ltsc_2024-x64
1About/Teka...mc.chm
windows10-2004-x64
1About/Teka...mc.chm
windows11-ltsc_2024-x64
1About/Teka...sc.chm
windows10-2004-x64
1About/Teka...sc.chm
windows11-ltsc_2024-x64
1About/Teka...32.chm
windows10-2004-x64
1About/Teka...32.chm
windows11-ltsc_2024-x64
1About/Teka...st.chm
windows10-2004-x64
1About/Teka...st.chm
windows11-ltsc_2024-x64
1About/Teka...et.chm
windows10-2004-x64
1About/Teka...et.chm
windows11-ltsc_2024-x64
1About/Teka...bc.chm
windows10-2004-x64
1About/Teka...bc.chm
windows11-ltsc_2024-x64
1About/Teka...db.chm
windows10-2004-x64
1About/Teka...db.chm
windows11-ltsc_2024-x64
1About/Teka...nf.chm
windows10-2004-x64
1About/Teka...nf.chm
windows11-ltsc_2024-x64
1About/Teka...df.chm
windows10-2004-x64
1About/Teka...df.chm
windows11-ltsc_2024-x64
1About/Teka...sc.chm
windows10-2004-x64
1About/Teka...sc.chm
windows11-ltsc_2024-x64
1About/Teka...32.chm
windows10-2004-x64
1About/Teka...32.chm
windows11-ltsc_2024-x64
1About/Teka...st.chm
windows10-2004-x64
1About/Teka...st.chm
windows11-ltsc_2024-x64
1About/Teka...et.chm
windows10-2004-x64
1About/Teka...et.chm
windows11-ltsc_2024-x64
1Analysis
- max time kernel
150s - max time network
134s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
16/10/2026, 21:30
Static task
static1
Behavioral task
behavioral1
Sample
About/IA2Marshal.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
About/IA2Marshal.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
About/Teka/Help/en-US/Help/en-US/credits.rtf
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
About/Teka/Help/en-US/Help/en-US/credits.rtf
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral5
Sample
About/Teka/Help/en-US/Help/mui/0409/cliconf.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
About/Teka/Help/en-US/Help/mui/0409/cliconf.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral7
Sample
About/Teka/Help/en-US/Help/mui/0409/mmc.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
About/Teka/Help/en-US/Help/mui/0409/mmc.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral9
Sample
About/Teka/Help/en-US/Help/mui/0409/msdasc.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
About/Teka/Help/en-US/Help/mui/0409/msdasc.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral11
Sample
About/Teka/Help/en-US/Help/mui/0409/msorcl32.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
About/Teka/Help/en-US/Help/mui/0409/msorcl32.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral13
Sample
About/Teka/Help/en-US/Help/mui/0409/odbcinst.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
About/Teka/Help/en-US/Help/mui/0409/odbcinst.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral15
Sample
About/Teka/Help/en-US/Help/mui/0409/odbcjet.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
About/Teka/Help/en-US/Help/mui/0409/odbcjet.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral17
Sample
About/Teka/Help/en-US/Help/mui/0409/sqlsodbc.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
About/Teka/Help/en-US/Help/mui/0409/sqlsodbc.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral19
Sample
About/Teka/Help/en-US/Help/mui/0409/sqlsoldb.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
About/Teka/Help/en-US/Help/mui/0409/sqlsoldb.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral21
Sample
About/Teka/Help/en-US/Help/mui/0419/cliconf.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
About/Teka/Help/en-US/Help/mui/0419/cliconf.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral23
Sample
About/Teka/Help/en-US/Help/mui/0419/dsfswdf.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
About/Teka/Help/en-US/Help/mui/0419/dsfswdf.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral25
Sample
About/Teka/Help/en-US/Help/mui/0419/msdasc.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
About/Teka/Help/en-US/Help/mui/0419/msdasc.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral27
Sample
About/Teka/Help/en-US/Help/mui/0419/msorcl32.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
About/Teka/Help/en-US/Help/mui/0419/msorcl32.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral29
Sample
About/Teka/Help/en-US/Help/mui/0419/odbcinst.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
About/Teka/Help/en-US/Help/mui/0419/odbcinst.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral31
Sample
About/Teka/Help/en-US/Help/mui/0419/odbcjet.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
About/Teka/Help/en-US/Help/mui/0419/odbcjet.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
General
- Target About/Teka/Help/en-US/Help/mui/0409/msorcl32.chm
- Size 73KB
- Sample261016-1cs4aaxt7j
- SHA256 482811c38ed17d6fb2fbcc60cd3b8f4a89764219585c0c1148e59cc0e25b8931
- MD5 c0aa228d770f3c77458deaf45ce6f226
- SHA1 620f64d0c800a8b40d3ad203aecf060e863c5b02
- SHA512 215a631bb1cee3d41ba800c5a513083a492c0401325fb5c792977ffff3683d89e819459d8044b9ff9b3c335621ea597e941e0ffffaa04d893c3afc7cc671188f
- SSDEEP 1536:i8PkRsCwLbaGQbKr+ie/iRNGQgDdVLqAf2jVA:VPKmzea+r/aN0+AOG
- TLSH T1F173F134B632D53BEBC28A3E6698E1E7E8DC856FDE03D4E952D0D16A3834B29114C077
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1084 hh.exe 1084 hh.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Microsoft\HTML Help\hh.dat
- Size 8KB
- SHA256 b7f77752e33dfc34fef4eb2a05999c13d7f6d739d296d42167e806634b097f89
- MD5 36e155fccd4cd78e75344e8a5c79a666
- SHA1 d55f6ac556de696f4cde887af6f9b5d440c8cadf
- SHA512 1cf76fd2b906f1b7bc28c55bceb15dcc73f2651e82f09a1ba09c4820624b2a83324d16b104d9d45fc7ddc3381db72965e8098dd72d8228cfd7fd53272fad2882
- SSDEEP 12:hm6ysNMqiNMvyc0Ke0l6eohI+KKe+KjK9zh+KlE/KlEvt+KlEvdX:Lx5yc0JQ1V2FlEClEvt1lEvdX
- TLSH T171026D3072208120E00D8B37FFDA958B75247D42AE94851B300FF75E45B9E0E6BB05EE
- MD5 SHA1 SHA512 SSDEEP TLSH