Overview
overview
3Static
static
3About/IA2Marshal.dll
windows10-2004-x64
1About/IA2Marshal.dll
windows11-ltsc_2024-x64
1About/Teka...ts.rtf
windows10-2004-x64
1About/Teka...ts.rtf
windows11-ltsc_2024-x64
1About/Teka...nf.chm
windows10-2004-x64
1About/Teka...nf.chm
windows11-ltsc_2024-x64
1About/Teka...mc.chm
windows10-2004-x64
1About/Teka...mc.chm
windows11-ltsc_2024-x64
1About/Teka...sc.chm
windows10-2004-x64
1About/Teka...sc.chm
windows11-ltsc_2024-x64
1About/Teka...32.chm
windows10-2004-x64
1About/Teka...32.chm
windows11-ltsc_2024-x64
1About/Teka...st.chm
windows10-2004-x64
1About/Teka...st.chm
windows11-ltsc_2024-x64
1About/Teka...et.chm
windows10-2004-x64
1About/Teka...et.chm
windows11-ltsc_2024-x64
1About/Teka...bc.chm
windows10-2004-x64
1About/Teka...bc.chm
windows11-ltsc_2024-x64
1About/Teka...db.chm
windows10-2004-x64
1About/Teka...db.chm
windows11-ltsc_2024-x64
1About/Teka...nf.chm
windows10-2004-x64
1About/Teka...nf.chm
windows11-ltsc_2024-x64
1About/Teka...df.chm
windows10-2004-x64
1About/Teka...df.chm
windows11-ltsc_2024-x64
1About/Teka...sc.chm
windows10-2004-x64
1About/Teka...sc.chm
windows11-ltsc_2024-x64
1About/Teka...32.chm
windows10-2004-x64
1About/Teka...32.chm
windows11-ltsc_2024-x64
1About/Teka...st.chm
windows10-2004-x64
1About/Teka...st.chm
windows11-ltsc_2024-x64
1About/Teka...et.chm
windows10-2004-x64
1About/Teka...et.chm
windows11-ltsc_2024-x64
1Analysis
- max time kernel
149s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
16/10/2026, 21:30
Static task
static1
Behavioral task
behavioral1
Sample
About/IA2Marshal.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
About/IA2Marshal.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
About/Teka/Help/en-US/Help/en-US/credits.rtf
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
About/Teka/Help/en-US/Help/en-US/credits.rtf
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral5
Sample
About/Teka/Help/en-US/Help/mui/0409/cliconf.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
About/Teka/Help/en-US/Help/mui/0409/cliconf.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral7
Sample
About/Teka/Help/en-US/Help/mui/0409/mmc.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
About/Teka/Help/en-US/Help/mui/0409/mmc.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral9
Sample
About/Teka/Help/en-US/Help/mui/0409/msdasc.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
About/Teka/Help/en-US/Help/mui/0409/msdasc.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral11
Sample
About/Teka/Help/en-US/Help/mui/0409/msorcl32.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
About/Teka/Help/en-US/Help/mui/0409/msorcl32.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral13
Sample
About/Teka/Help/en-US/Help/mui/0409/odbcinst.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
About/Teka/Help/en-US/Help/mui/0409/odbcinst.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral15
Sample
About/Teka/Help/en-US/Help/mui/0409/odbcjet.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
About/Teka/Help/en-US/Help/mui/0409/odbcjet.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral17
Sample
About/Teka/Help/en-US/Help/mui/0409/sqlsodbc.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
About/Teka/Help/en-US/Help/mui/0409/sqlsodbc.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral19
Sample
About/Teka/Help/en-US/Help/mui/0409/sqlsoldb.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
About/Teka/Help/en-US/Help/mui/0409/sqlsoldb.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral21
Sample
About/Teka/Help/en-US/Help/mui/0419/cliconf.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
About/Teka/Help/en-US/Help/mui/0419/cliconf.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral23
Sample
About/Teka/Help/en-US/Help/mui/0419/dsfswdf.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
About/Teka/Help/en-US/Help/mui/0419/dsfswdf.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral25
Sample
About/Teka/Help/en-US/Help/mui/0419/msdasc.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
About/Teka/Help/en-US/Help/mui/0419/msdasc.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral27
Sample
About/Teka/Help/en-US/Help/mui/0419/msorcl32.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
About/Teka/Help/en-US/Help/mui/0419/msorcl32.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral29
Sample
About/Teka/Help/en-US/Help/mui/0419/odbcinst.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
About/Teka/Help/en-US/Help/mui/0419/odbcinst.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral31
Sample
About/Teka/Help/en-US/Help/mui/0419/odbcjet.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
About/Teka/Help/en-US/Help/mui/0419/odbcjet.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
General
- Target About/Teka/Help/en-US/Help/mui/0409/odbcinst.chm
- Size 76KB
- Sample261016-1cs4aaxt7j
- SHA256 350f3e7cdc45b99bb3448d10c724d5ba6ac532cc51ef3ec4513f4d218b947d7a
- MD5 bf0942377f014c00b6e8520822a6c07c
- SHA1 3ecd626dae4ec6f8dbc73e76de63428cc0a46656
- SHA512 3e1b3e5a8df0a3d6f732b8be8681afa9e7660b173288d8ec376697dbb8d3f4ce91f23403b9749b7ea0930c4344b2833fcc680042a5571ba07376ee352e12a75f
- SSDEEP 1536:vVpopkiWXJm45/n7HGMAzBmoQ2uPdJMZTiXrHJypqsdaBqyMWH:Npop7WXYcn7HG5Vmo+dJh0EH
- TLSH T12573E07471B68073C7C89B7EB948D44BD9E8145EFC1BD0E067C8B568623CBBD26A0972
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1172 hh.exe 1172 hh.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Microsoft\HTML Help\hh.dat
- Size 8KB
- SHA256 71d468d67cf43274be75898de5c9c3d67a76cd1778ee409e338173514f331ba0
- MD5 bce7457daee826068afaeecfa30d7bc0
- SHA1 342b006ededc0102bb8d119a7b7967e5bc393b0f
- SHA512 c8120c08fccf5b1ceafd20dcc2a406da9a7d8ce9164e005c7ca167a034625fc73c0a992c726e22b7f5d36be302a7d0ae1be9c5eff4b90f59f937a8c8d1aa99a1
- SSDEEP 12:um6ysNMqiNMvyc0Ke0l6eohI+KKe+KjK9zh+KlE/KlEvt+KlEvdX:Ux5yc0JQ1V2FlEClEvt1lEvdX
- TLSH T18F026D3072208120E00D8B37FFDA959B75247D42AE94451B300EF75E45B9E0E5BB05EE
- MD5 SHA1 SHA512 SSDEEP TLSH