5d254ac1eb881ee492264f1d41e7c59b74275285c18b786379d94dfd175baca6

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
27/09/2024, 12:05 UTC

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

WinTools.net Ultimate/Help/english.chm
Size

37KB
MD5

29aa572f184d9a3954a3fc09d717480f
SHA1

f5a25d5fda486b6d60b5217b5988149b661bebd9
SHA256

cb450bba7d017d45bc311af22f3ada0274946705bfa838ca31094d25c25d6767
SHA512

14ef3d8459264b101df3fe64785e0912065748825cc86aaf59e7c48e74ffbbe9e47cc170b4f29fb49415f904e9d87d66b7e341d6d29f191289eb9a8469e5456d
SSDEEP

768:OFU5bLPbieCIY7BgLuDGokGYxUHdUSaVAQn8l7N4HANwFAivE:OFU5nb1ygLua33UH6VfTHANJJ

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Main	hh.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2240	hh.exe
2240	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" "C:\Users\Admin\AppData\Local\Temp\WinTools.net Ultimate\Help\english.chm"
1⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2240

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

We care about your privacy.