Overview
overview
3Static
static
3About/IA2Marshal.dll
windows10-2004-x64
1About/IA2Marshal.dll
windows11-ltsc_2024-x64
1About/Teka...ts.rtf
windows10-2004-x64
1About/Teka...ts.rtf
windows11-ltsc_2024-x64
1About/Teka...nf.chm
windows10-2004-x64
1About/Teka...nf.chm
windows11-ltsc_2024-x64
1About/Teka...mc.chm
windows10-2004-x64
1About/Teka...mc.chm
windows11-ltsc_2024-x64
1About/Teka...sc.chm
windows10-2004-x64
1About/Teka...sc.chm
windows11-ltsc_2024-x64
1About/Teka...32.chm
windows10-2004-x64
1About/Teka...32.chm
windows11-ltsc_2024-x64
1About/Teka...st.chm
windows10-2004-x64
1About/Teka...st.chm
windows11-ltsc_2024-x64
1About/Teka...et.chm
windows10-2004-x64
1About/Teka...et.chm
windows11-ltsc_2024-x64
1About/Teka...bc.chm
windows10-2004-x64
1About/Teka...bc.chm
windows11-ltsc_2024-x64
1About/Teka...db.chm
windows10-2004-x64
1About/Teka...db.chm
windows11-ltsc_2024-x64
1About/Teka...nf.chm
windows10-2004-x64
1About/Teka...nf.chm
windows11-ltsc_2024-x64
1About/Teka...df.chm
windows10-2004-x64
1About/Teka...df.chm
windows11-ltsc_2024-x64
1About/Teka...sc.chm
windows10-2004-x64
1About/Teka...sc.chm
windows11-ltsc_2024-x64
1About/Teka...32.chm
windows10-2004-x64
1About/Teka...32.chm
windows11-ltsc_2024-x64
1About/Teka...st.chm
windows10-2004-x64
1About/Teka...st.chm
windows11-ltsc_2024-x64
1About/Teka...et.chm
windows10-2004-x64
1About/Teka...et.chm
windows11-ltsc_2024-x64
1Analysis
- max time kernel
149s - max time network
161s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
16/10/2026, 21:30
Static task
static1
Behavioral task
behavioral1
Sample
About/IA2Marshal.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
About/IA2Marshal.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
About/Teka/Help/en-US/Help/en-US/credits.rtf
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
About/Teka/Help/en-US/Help/en-US/credits.rtf
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral5
Sample
About/Teka/Help/en-US/Help/mui/0409/cliconf.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
About/Teka/Help/en-US/Help/mui/0409/cliconf.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral7
Sample
About/Teka/Help/en-US/Help/mui/0409/mmc.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
About/Teka/Help/en-US/Help/mui/0409/mmc.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral9
Sample
About/Teka/Help/en-US/Help/mui/0409/msdasc.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
About/Teka/Help/en-US/Help/mui/0409/msdasc.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral11
Sample
About/Teka/Help/en-US/Help/mui/0409/msorcl32.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
About/Teka/Help/en-US/Help/mui/0409/msorcl32.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral13
Sample
About/Teka/Help/en-US/Help/mui/0409/odbcinst.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
About/Teka/Help/en-US/Help/mui/0409/odbcinst.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral15
Sample
About/Teka/Help/en-US/Help/mui/0409/odbcjet.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
About/Teka/Help/en-US/Help/mui/0409/odbcjet.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral17
Sample
About/Teka/Help/en-US/Help/mui/0409/sqlsodbc.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
About/Teka/Help/en-US/Help/mui/0409/sqlsodbc.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral19
Sample
About/Teka/Help/en-US/Help/mui/0409/sqlsoldb.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
About/Teka/Help/en-US/Help/mui/0409/sqlsoldb.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral21
Sample
About/Teka/Help/en-US/Help/mui/0419/cliconf.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
About/Teka/Help/en-US/Help/mui/0419/cliconf.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral23
Sample
About/Teka/Help/en-US/Help/mui/0419/dsfswdf.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
About/Teka/Help/en-US/Help/mui/0419/dsfswdf.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral25
Sample
About/Teka/Help/en-US/Help/mui/0419/msdasc.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
About/Teka/Help/en-US/Help/mui/0419/msdasc.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral27
Sample
About/Teka/Help/en-US/Help/mui/0419/msorcl32.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
About/Teka/Help/en-US/Help/mui/0419/msorcl32.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral29
Sample
About/Teka/Help/en-US/Help/mui/0419/odbcinst.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
About/Teka/Help/en-US/Help/mui/0419/odbcinst.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral31
Sample
About/Teka/Help/en-US/Help/mui/0419/odbcjet.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
About/Teka/Help/en-US/Help/mui/0419/odbcjet.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
General
- Target About/Teka/Help/en-US/Help/mui/0409/sqlsoldb.chm
- Size 62KB
- Sample261016-1cs4aaxt7j
- SHA256 2f9355f5db80f86272f091b138f8b48a253dad7609ed696e4b7e3379cbf28917
- MD5 3f3d9ab55fb11f31466413aa692d4159
- SHA1 8793560bf876df1dc98b38f967fe24167810bccb
- SHA512 669ed441c5d7f650be59398d640a54b8c1c81e8cc8b66d58885054128858fd8a8a763021d67e93ad845ea4951dfb745264ff828fe550d1377a44728309c455bd
- SSDEEP 1536:pZEp4xibHReTio4mV7W9/Zc8K3+uNK1KpL60pT0n8cgSyRrK:rS4xibkTR/1WRc8a+uw14TpT0nRgSyR2
- TLSH T1D55302F0A5639193EBD05377FBB6440BED1ABC0DED3CF8D592E054852630AA9846CA1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 736 hh.exe 736 hh.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Microsoft\HTML Help\hh.dat
- Size 8KB
- SHA256 e928acf9c3ceada3a6acf71ce15b51c4943b47651be77e5473f38281a3c05ca4
- MD5 c553c9d2509c3f09e761c04f7b593e2a
- SHA1 fb14bab05f5b940b1f5a5f341171412caa2b4e4b
- SHA512 5cb4c142a1ea62395111f9901810165c3252e73989f1bda11abc8bff2761c1416285e27003f80b83944b32d695be3d4e910597163edd6cb45ab4e2e2c8831bfa
- SSDEEP 12:zvCm6ysNMqiNMvyc0Ke0l6eohI+KKe+KjK9zh+KlE/KlEvt+KlEvdX:zAx5yc0JQ1V2FlEClEvt1lEvdX
- TLSH T14902493072208124E00D8B37BFDA958B75247D42AE94451B300EF75E46B9E0E6BB05EE
- MD5 SHA1 SHA512 SSDEEP TLSH