98ab23077ec522e164ccf5bca8a8fb2eaf1b6113d0d1104d2306f15727623690

Analysis

max time kernel
30s
max time network
33s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
05-03-2023 11:29

Target

LastActivityView.chm
Size

19KB
MD5

b197f30461e9bd567b6339d0fc167fba
SHA1

3959d59b62ccf54a0fdef01eda15524baeacaf99
SHA256

98ab23077ec522e164ccf5bca8a8fb2eaf1b6113d0d1104d2306f15727623690
SHA512

26cd59ac17bbb6cf5c3d667a963a7e7104f74c62945ad1bc42d9378e71ec1c5c69dae097820c76091e7bd7af1780113f58cc961b79d0efc62c37096fed92ec74
SSDEEP

192:MD10EKVfI2O+t5ajJg2Nx81GxoUAbnDqzfnAYIVWE5Ju8Wx0NIM5/y99n:MD10EKW2OA5J2PoUASzYPVWEZWG49n

Score

1^/10

Modifies Internet Explorer settings 1 TTPs 1 IoCs

Modify Registry

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1914912747-3343861975-731272777-1000\Software\Microsoft\Internet Explorer\Main	hh.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2016	hh.exe
2016	hh.exe

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact