Overview
overview
3Static
static
3About/IA2Marshal.dll
windows10-2004-x64
1About/IA2Marshal.dll
windows11-ltsc_2024-x64
1About/Teka...ts.rtf
windows10-2004-x64
1About/Teka...ts.rtf
windows11-ltsc_2024-x64
1About/Teka...nf.chm
windows10-2004-x64
1About/Teka...nf.chm
windows11-ltsc_2024-x64
1About/Teka...mc.chm
windows10-2004-x64
1About/Teka...mc.chm
windows11-ltsc_2024-x64
1About/Teka...sc.chm
windows10-2004-x64
1About/Teka...sc.chm
windows11-ltsc_2024-x64
1About/Teka...32.chm
windows10-2004-x64
1About/Teka...32.chm
windows11-ltsc_2024-x64
1About/Teka...st.chm
windows10-2004-x64
1About/Teka...st.chm
windows11-ltsc_2024-x64
1About/Teka...et.chm
windows10-2004-x64
1About/Teka...et.chm
windows11-ltsc_2024-x64
1About/Teka...bc.chm
windows10-2004-x64
1About/Teka...bc.chm
windows11-ltsc_2024-x64
1About/Teka...db.chm
windows10-2004-x64
1About/Teka...db.chm
windows11-ltsc_2024-x64
1About/Teka...nf.chm
windows10-2004-x64
1About/Teka...nf.chm
windows11-ltsc_2024-x64
1About/Teka...df.chm
windows10-2004-x64
1About/Teka...df.chm
windows11-ltsc_2024-x64
1About/Teka...sc.chm
windows10-2004-x64
1About/Teka...sc.chm
windows11-ltsc_2024-x64
1About/Teka...32.chm
windows10-2004-x64
1About/Teka...32.chm
windows11-ltsc_2024-x64
1About/Teka...st.chm
windows10-2004-x64
1About/Teka...st.chm
windows11-ltsc_2024-x64
1About/Teka...et.chm
windows10-2004-x64
1About/Teka...et.chm
windows11-ltsc_2024-x64
1Analysis
- max time kernel
148s - max time network
133s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
16/10/2026, 21:30
Static task
static1
Behavioral task
behavioral1
Sample
About/IA2Marshal.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
About/IA2Marshal.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
About/Teka/Help/en-US/Help/en-US/credits.rtf
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
About/Teka/Help/en-US/Help/en-US/credits.rtf
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral5
Sample
About/Teka/Help/en-US/Help/mui/0409/cliconf.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
About/Teka/Help/en-US/Help/mui/0409/cliconf.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral7
Sample
About/Teka/Help/en-US/Help/mui/0409/mmc.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
About/Teka/Help/en-US/Help/mui/0409/mmc.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral9
Sample
About/Teka/Help/en-US/Help/mui/0409/msdasc.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
About/Teka/Help/en-US/Help/mui/0409/msdasc.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral11
Sample
About/Teka/Help/en-US/Help/mui/0409/msorcl32.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
About/Teka/Help/en-US/Help/mui/0409/msorcl32.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral13
Sample
About/Teka/Help/en-US/Help/mui/0409/odbcinst.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
About/Teka/Help/en-US/Help/mui/0409/odbcinst.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral15
Sample
About/Teka/Help/en-US/Help/mui/0409/odbcjet.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
About/Teka/Help/en-US/Help/mui/0409/odbcjet.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral17
Sample
About/Teka/Help/en-US/Help/mui/0409/sqlsodbc.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
About/Teka/Help/en-US/Help/mui/0409/sqlsodbc.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral19
Sample
About/Teka/Help/en-US/Help/mui/0409/sqlsoldb.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
About/Teka/Help/en-US/Help/mui/0409/sqlsoldb.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral21
Sample
About/Teka/Help/en-US/Help/mui/0419/cliconf.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
About/Teka/Help/en-US/Help/mui/0419/cliconf.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral23
Sample
About/Teka/Help/en-US/Help/mui/0419/dsfswdf.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
About/Teka/Help/en-US/Help/mui/0419/dsfswdf.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral25
Sample
About/Teka/Help/en-US/Help/mui/0419/msdasc.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
About/Teka/Help/en-US/Help/mui/0419/msdasc.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral27
Sample
About/Teka/Help/en-US/Help/mui/0419/msorcl32.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
About/Teka/Help/en-US/Help/mui/0419/msorcl32.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral29
Sample
About/Teka/Help/en-US/Help/mui/0419/odbcinst.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
About/Teka/Help/en-US/Help/mui/0419/odbcinst.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral31
Sample
About/Teka/Help/en-US/Help/mui/0419/odbcjet.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
About/Teka/Help/en-US/Help/mui/0419/odbcjet.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
General
- Target About/Teka/Help/en-US/Help/mui/0419/odbcinst.chm
- Size 79KB
- Sample261016-1cs4aaxt7j
- SHA256 184cba455e9b234af57c2c50cb7cc2321e59f17ee607b63a7bf2a3e4f3c8de58
- MD5 764039fc7c1c21a8095be1d912e917b7
- SHA1 8443e8934ddf0e65e644b2ddacef92bfc90a2930
- SHA512 0e321bc198a14cd31984ae63aa0be5c1a43dd7e959d7b075a058220383de1234c6a8da272167d00034a0e020c7e5ad4fffbdd94a38f3e7b25982dbdedccccff3
- SSDEEP 1536:93/H/t5bFEyftXZtpNE6wDR6y7W7EToR6Q2RrQz6tQ1uGYqpIQ7gG:l/H/tt+CZtpNE3gy7HdleUQ1uGhpdR
- TLSH T19183F17C76F242A3D3E9D93AE7A786D3E9B2155FFC37C4C226C5A72829B524800B5413
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3180 hh.exe 3180 hh.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Microsoft\HTML Help\hh.dat
- Size 8KB
- SHA256 ff81185f067cc58d1625daa6fc70972c7251b0d80abeda4449c0b7ffbb096e8f
- MD5 e48fb2161d1067e3727ce5338b747863
- SHA1 a9b4cf1ed04c81132a042e77b7458bc96099269e
- SHA512 f30c245fb1fc3ec101804f1640747c792d6a86e25801b56c856855fa4aae2f7bd13521d87439a18342e77d6466ff49693484cc5b61106dc4f81927bf61a2cc7b
- SSDEEP 12:1Am6ysNMqiNMvyc0Ke0l6eohI+KKe+KjK9zh+KlE/KlEvt+KlEvdX:1ux5yc0JQ1V2FlEClEvt1lEvdX
- TLSH T1C502493072208124E00D8B37BFDA958B75247D42AE94451B300EF75E45B9E0E5BB05EE
- MD5 SHA1 SHA512 SSDEEP TLSH