1eb4db65ad70c914b2f5690d3ea5a3710578a60209780d228389ca0c305b0057

Analysis

max time kernel
117s
max time network
120s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
12/03/2024, 06:06

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Help/VideoGet.chm
Size

136KB
MD5

1caf13a7f712d2ea3c59bcc0bd52c7d5
SHA1

a44b121b5a2ebe9ee2ec5de645247fd2509470b8
SHA256

a4029adbde1e8ffa643cbd88fdd8f8965ff61fc973eba7abe8adece1f7b683b6
SHA512

8f76cdd66374a730c41437ea3a2343bcc10ac63c14c6af1cc3519d70127144e2bc5d28fb229d4bf4e7cf1eca0bd92f5fb2d26ba23f6f5ec45ae22d319a4d75ca
SSDEEP

3072:tjBnuTCdG/mTFxmHPQGeuKY2V4Qvj2Yf3uXDhtywkwozhG74O35a:tjVuCdGO5xmHUjff3+htyllk74OA

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\Main	hh.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2992	hh.exe
2992	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\Help\VideoGet.chm
1⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2992

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads