Overview
overview
3Static
static
3About/IA2Marshal.dll
windows10-2004-x64
1About/IA2Marshal.dll
windows11-ltsc_2024-x64
1About/Teka...ts.rtf
windows10-2004-x64
1About/Teka...ts.rtf
windows11-ltsc_2024-x64
1About/Teka...nf.chm
windows10-2004-x64
1About/Teka...nf.chm
windows11-ltsc_2024-x64
1About/Teka...mc.chm
windows10-2004-x64
1About/Teka...mc.chm
windows11-ltsc_2024-x64
1About/Teka...sc.chm
windows10-2004-x64
1About/Teka...sc.chm
windows11-ltsc_2024-x64
1About/Teka...32.chm
windows10-2004-x64
1About/Teka...32.chm
windows11-ltsc_2024-x64
1About/Teka...st.chm
windows10-2004-x64
1About/Teka...st.chm
windows11-ltsc_2024-x64
1About/Teka...et.chm
windows10-2004-x64
1About/Teka...et.chm
windows11-ltsc_2024-x64
1About/Teka...bc.chm
windows10-2004-x64
1About/Teka...bc.chm
windows11-ltsc_2024-x64
1About/Teka...db.chm
windows10-2004-x64
1About/Teka...db.chm
windows11-ltsc_2024-x64
1About/Teka...nf.chm
windows10-2004-x64
1About/Teka...nf.chm
windows11-ltsc_2024-x64
1About/Teka...df.chm
windows10-2004-x64
1About/Teka...df.chm
windows11-ltsc_2024-x64
1About/Teka...sc.chm
windows10-2004-x64
1About/Teka...sc.chm
windows11-ltsc_2024-x64
1About/Teka...32.chm
windows10-2004-x64
1About/Teka...32.chm
windows11-ltsc_2024-x64
1About/Teka...st.chm
windows10-2004-x64
1About/Teka...st.chm
windows11-ltsc_2024-x64
1About/Teka...et.chm
windows10-2004-x64
1About/Teka...et.chm
windows11-ltsc_2024-x64
1Analysis
- max time kernel
149s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
16/10/2026, 21:30
Static task
static1
Behavioral task
behavioral1
Sample
About/IA2Marshal.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
About/IA2Marshal.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
About/Teka/Help/en-US/Help/en-US/credits.rtf
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
About/Teka/Help/en-US/Help/en-US/credits.rtf
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral5
Sample
About/Teka/Help/en-US/Help/mui/0409/cliconf.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
About/Teka/Help/en-US/Help/mui/0409/cliconf.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral7
Sample
About/Teka/Help/en-US/Help/mui/0409/mmc.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
About/Teka/Help/en-US/Help/mui/0409/mmc.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral9
Sample
About/Teka/Help/en-US/Help/mui/0409/msdasc.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
About/Teka/Help/en-US/Help/mui/0409/msdasc.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral11
Sample
About/Teka/Help/en-US/Help/mui/0409/msorcl32.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
About/Teka/Help/en-US/Help/mui/0409/msorcl32.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral13
Sample
About/Teka/Help/en-US/Help/mui/0409/odbcinst.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
About/Teka/Help/en-US/Help/mui/0409/odbcinst.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral15
Sample
About/Teka/Help/en-US/Help/mui/0409/odbcjet.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
About/Teka/Help/en-US/Help/mui/0409/odbcjet.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral17
Sample
About/Teka/Help/en-US/Help/mui/0409/sqlsodbc.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
About/Teka/Help/en-US/Help/mui/0409/sqlsodbc.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral19
Sample
About/Teka/Help/en-US/Help/mui/0409/sqlsoldb.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
About/Teka/Help/en-US/Help/mui/0409/sqlsoldb.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral21
Sample
About/Teka/Help/en-US/Help/mui/0419/cliconf.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
About/Teka/Help/en-US/Help/mui/0419/cliconf.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral23
Sample
About/Teka/Help/en-US/Help/mui/0419/dsfswdf.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
About/Teka/Help/en-US/Help/mui/0419/dsfswdf.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral25
Sample
About/Teka/Help/en-US/Help/mui/0419/msdasc.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
About/Teka/Help/en-US/Help/mui/0419/msdasc.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral27
Sample
About/Teka/Help/en-US/Help/mui/0419/msorcl32.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
About/Teka/Help/en-US/Help/mui/0419/msorcl32.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral29
Sample
About/Teka/Help/en-US/Help/mui/0419/odbcinst.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
About/Teka/Help/en-US/Help/mui/0419/odbcinst.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral31
Sample
About/Teka/Help/en-US/Help/mui/0419/odbcjet.chm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
About/Teka/Help/en-US/Help/mui/0419/odbcjet.chm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
General
- Target About/Teka/Help/en-US/Help/mui/0409/msdasc.chm
- Size 75KB
- Sample261016-1cs4aaxt7j
- SHA256 aaaa1d54087d10801231b4bff492beac227c8b713dda39bfbbfd0972adb0129a
- MD5 86165cf3d62317770fce58f3cb1d4dd4
- SHA1 6ec118c5eb9f0da89d25f52215169ecd6e14339a
- SHA512 497f196ecdfd526edf1ad9006a8830ae8a723f2e7ad3f09875fa322f8d8fa5e16833070506145f2035f53f5b315dd533087137db77b87b301bacd12cb57f58ec
- SSDEEP 1536:3Cmnm4NN6/1xo2WnRQPPXBt/5N5MWj9F5ahr:JmQcEBnRCfH/3D9F50
- TLSH T1CB73F134FAB68137CB409A3ABD269513EE87041EFC37D5E063E29825307174E35A81E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4088 hh.exe 4088 hh.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Microsoft\HTML Help\hh.dat
- Size 8KB
- SHA256 3cb1503f45662b122f896511417fc898f9c6f44426e4e02605a15cf8b5414888
- MD5 242ba4891ba7dea1a60c525c870fecf6
- SHA1 66bf524f53da065af742d2b1a9d2132ee9d72d3c
- SHA512 cb296b5905182b1048c7faeb98b1bcbdd8295cfb0c76412309da62d54b7a6be9d8fc312732b7228719e3054264c39fef709cb6ef74dd301f2e7c39176a6c0bb0
- SSDEEP 12:am6ysNMqiNMvyc0Ke0l6eohI+KKe+KjK9zh+KlE/KlEvt+KlEvdX:gx5yc0JQ1V2FlEClEvt1lEvdX
- TLSH T1CB02493072208120E00D8B37BFDA958B75247D42AE94451B300EF75E49B9E0E5BB09EE
- MD5 SHA1 SHA512 SSDEEP TLSH