Analysis
-
max time kernel
119s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
30/12/2023, 05:33
Static task
static1
Behavioral task
behavioral1
Sample
ICEECC.chm
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
ICEECC.chm
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
ICEECC.exe
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
ICEECC.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
新云软件.url
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
新云软件.url
Resource
win10v2004-20231215-en
General
-
Target
ICEECC.chm
-
Size
28KB
-
MD5
cec5ad2956c57ee2815435668a89992b
-
SHA1
166e4067365571156e8703522b3577b8b1c5d914
-
SHA256
d43d1535ed6fa1a2012d61d6c7911f43dbc8e3125566399e769fc92e5e3fb2d2
-
SHA512
d40eda772a954f73647121e37d99535745f255ad186734e368b38d5c25592dc247a4f7340f8655d4452470959af0aecb99fd1f18d00f8e73f39dbf5d3602fe9c
-
SSDEEP
768:DF160d50jh9zbR9RqN6A7kacZxn0cbVysO:DF160dKjnqkacLTb7O
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\Main hh.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 816 hh.exe 816 hh.exe