41caeb1dab6ab9da4571b88cd0a0a2b3a21ce305909358e538a04f988d4a139f | Triage

Analysis

max time kernel
600s
max time network
486s
platform
windows11-21h2_x64
resource
win11-20240611-en
resource tags

arch:x64arch:x86image:win11-20240611-enlocale:en-usos:windows11-21h2-x64system
submitted
30-06-2024 16:43

Sharing

Report Analysis Logs

General

Target

hwid pack/usb device serial/USBDeview.chm
Size

24KB
MD5

ef8d0a30da9ab8cdbbbd62d74bce1187
SHA1

06441c5dfa4b9577afc989454216ea014a49b8d6
SHA256

d5909ca92c389ab1c01909a6f07fd351e2a655be97931caaecc3307a9e8f26e1
SHA512

695faa16c29d0ca5bdb2afc5da3e05f25a6b17ce4dbee43aebc9ffdbe18d843273437bb0189bb1ef2a4ececbb236aefe634f38f94a179e593edaa6105fb2e789
SSDEEP

384:ZaeGDZD/3k0Xb1/WN1iA73A8f2ZVDUDjGTa1Mu72:Za1ZtijuVDUHGO1j6

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

hh.exe

pid process

4200 hh.exe
4200 hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" "C:\Users\Admin\AppData\Local\Temp\hwid pack\usb device serial\USBDeview.chm"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4200

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...