7b2e7cb37eb150318f0e83d22290f1224bbff9e7864fb57021bdee4a68e9f4d7

Analysis

max time kernel
117s
max time network
122s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
26-07-2024 18:09

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Language/English.chm
Size

447KB
MD5

89e8ee8c071387e741acda5402ec6932
SHA1

d6814f76ae039f50759a587a44d3f9fb56b9f0e3
SHA256

c96cf8f4ad960ff26a0ecc5394fda62f73e0d9232af15ce8e5808945129b3512
SHA512

0b570fc729b0ec16e36d432e0c073bca07e6625ebd15715f11d0d84e4c1d1bc107ec7987f82f1a484bf195c071175d98a9526a921f304e8efc2922612319fdf3
SSDEEP

12288:kc1X1o+/hiCzFNI5oScbHArQS8FNqG2kdO5GErO:kct3jIggknNj2QwlS

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Main	hh.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2700	hh.exe
2700	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\Language\English.chm
1⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2700

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads