15117785a3adde9174014c27ac4a83f25dd7f2d03e2b151c53e445143e4bf89b

Analysis

max time kernel
100s
max time network
17s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
04/10/2024, 12:21

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

smlgcfgs.chm
Size

20KB
MD5

9337bcc0dc84b4cd88f5e9227ef78c42
SHA1

131536ecd4306c3e6b404001590fd32f68d5f2b8
SHA256

dafb5bf159dd5c453789ba6e9350b7c7a24d7cd0c4afaeb1e0a07884f977ae70
SHA512

f218d3bde3a81073ff1e1c65b6c57b67caf20e63e2ad8e8ef92840ce51899cee280f7679964cbf170662349d5a9e865a2619f402fe34d06c0d8e20c74aec283b
SSDEEP

384:6kkd1UL/XAvTYI9coSKhV2WJ2IBcrjE6P:6xdqbXYT1H6WJCrjE4

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\Main	hh.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2736	hh.exe
2736	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\smlgcfgs.chm
1⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2736

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...