267bdfcd1012dd782dc67d24841b02c793efb43aa7cafb65f17c85fd63c70a1e

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
06/09/2024, 15:09 UTC

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

smsniff.chm
Size

18KB
MD5

406e807947b81980c9fc16035b671064
SHA1

c986aa02772f436451c8b10a7b1c091b405606f0
SHA256

8b908765fe9c279a276fa7d5593bf44ff7616dd1e56211e1bcc329a22ded557a
SHA512

69dd2dcdfb92cba644bc6342ee93f6b1a14e246834a5563229e80d54152364419f1ffe5a5d9569d24133de9f484d17788be3fcb741fa65f693d57acffcb6ee61
SSDEEP

192:gIxHNJrOsFvFrfGXYmSGK2NhhF2qkVzcJ5AMiuVxEcCNfi7xBkYdsisX:gIxfLFiYmjKeh66J/SK7x5+HX

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Main	hh.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1404	hh.exe
1404	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\smsniff.chm
1⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:1404

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

We care about your privacy.