01909b97c734400c569ffac62327c7458f23cbfb431d971406c8306742186f7f

Analysis

max time kernel
11s
max time network
16s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
27/07/2024, 06:07

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Hide IP Platinum/help.chm
Size

61KB
MD5

9c3d781bc6c34180c3abcb7e217bfb91
SHA1

c73da4f5aea920b24b10e087330fd578d72aa19d
SHA256

e0e36292b48178e3ed261dcb34243d34249e520720157117fddc54285d18b3e6
SHA512

6f37c9393c0bf71d91bccfbaa884f94213917801ca9fb2d058e02da1de1e8156341ecff4f343503ba1ec80feb9fb90ae55098a01d7717ba993e273e3991ed021
SSDEEP

1536:jR/Qier6LFiUzDVpbvUjeOckkdpgJ7D3iBZqFSPGo:V/1EUzppDgeWqgJ/3iBESOo

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main	hh.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2796	hh.exe
2796	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" "C:\Users\Admin\AppData\Local\Temp\Hide IP Platinum\help.chm"
1⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2796

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads