Analysis

  • max time kernel
    30s
  • max time network
    34s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    12-03-2023 20:06

General

  • Target

    EES Aprende.Química.e.Ingeniería.con.Toño/Userlib/Heat Transfer/Convection/regenerator_packings.chm

  • Size

    322KB

  • MD5

    62836913b496ddc1e181c5a6371ae894

  • SHA1

    07d4df3cd375d9f643f03e929b58f47a88e1eb1e

  • SHA256

    85c38384c0758da9ebde9728b989464a69bd8bac8af475d1fbb61e686f3a2b2d

  • SHA512

    d4ad39e04c71d95a87ffec483f1e1c29d6eefb631c87b0622de29ec3bc6cc1f8a20c68f877a5b8c22a08c672d4beb5cb76419e86d16ad332f3b811f9d0fe25bf

  • SSDEEP

    6144:GzlM2gITxTGMrA1sVeM+FhZwp2n2OrWxSDjCzCjUDnBjlNZCZLs2DhiIhA1RHU:9nzEA1scthOUQlC4lvihiIhM0

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Windows\hh.exe
    "C:\Windows\hh.exe" "C:\Users\Admin\AppData\Local\Temp\EES Aprende.Química.e.Ingeniería.con.Toño\Userlib\Heat Transfer\Convection\regenerator_packings.chm"
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of SetWindowsHookEx
    PID:932

Network

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Modify Registry

1
T1112

Replay Monitor

Loading Replay Monitor...

Downloads