54f2ba03e0e341cb547e35e293ceb05c89488f8c47fa7a4e5539fcff9084b6b2

Analysis

max time kernel
121s
max time network
128s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31-12-2023 04:29

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Language/English.chm
Size

33KB
MD5

1164786ebfa6db18768fe78afbc4815e
SHA1

a3bb0bf3477c9cf065cbcaa6f77c69690f220885
SHA256

12f0377c3dff59e698c9b5d8f1dcbe2b3934fcbd35525d06e7217a0a88fccd6f
SHA512

da12a645c07407877218f74b86223c54fa971f66d7069f00f8da1185857cc9db6add670d87b16c8a6841b1856f738e2fe98adc1d19931532e7ec0aa2f7f88bdc
SSDEEP

768:KPgoWEwcl6kDZ/WdG620k9GhI3eaL6Rk3:KPNDl66dWdH2bGees3

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main	hh.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2424	hh.exe
2424	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\Language\English.chm
1⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2424

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads