0aad85d84f05a4a15d601dde72683f809fed0373f57c99c4e4029d9f8e1d5ef3

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
16-12-2024 01:55

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

"MT.chm
Size

29KB
MD5

d7113eec82c29b6bf795ed39d427c2d9
SHA1

43a8bfc625f4e08acf0c3b1eda048a3773b81f0f
SHA256

48ec4ae533e6ed162ed2c89985c0c85cc9c240ef3932338b53eca4914a3a4685
SHA512

089f94f5e2a25859d1d65293b823b6074cae76fe9fbea75afa0cf04329dffca1ee83c2f497c4008c365e5ba8b0bcd10dda283a2e4f4dc4d3ed2dc591aafa9fb8
SSDEEP

384:M5rmG+jfpeQtndBDm6o7XNzLHDYQ/fAoNw+7YaE990QsCNF0oeK:M18bDdi7tTkQlb7JCN6nK

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Main	hh.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2168	hh.exe
2168	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\_MT.chm
1⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2168

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads