69be1852895f5397617d57c01eb8c1fb22d059933cc2e6fb632e211e52dd8535

Analysis

max time kernel
118s
max time network
121s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
27-10-2024 22:21

Target

winpirate-master/Tools/Browsinghistoryview/BrowsingHistoryView.chm
Size

19KB
MD5

40a8b71d4470118f60980ae0a711df03
SHA1

0d712f1177f5d35427727cd527b070af8e7b893c
SHA256

ee5db85e5c8d6ce7b95d1a9c574e741b0a83866a124ddd5b7fe6c44057f3001f
SHA512

8e790a0cba46c9a7f2860367f3f7b539745f51687b37838e7ffbccc46fdfcd52e820686e8d079f01a1d3220cc97354fcc7572edd43ff08916e66aa72d51adf3c
SSDEEP

192:z8VRdJe4YxRZCEFhpY5yNB6I0H0itcWxhwbgee7S0VElJYWDaozwoLqId:z6RjGCQNBSZhwMglvzw7w

Score

1^/10

Modifies Internet Explorer settings 1 TTPs 1 IoCs
adware spyware

Modify Registry
T1112

Processes:

hh.exe

description ioc process

Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\Main hh.exe
Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

hh.exe

pid process

1564 hh.exe
1564 hh.exe

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\Main	hh.exe

pid	process
1564	hh.exe
1564	hh.exe

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact