61d3e7a824489b33ea6e60c9138bf4d44128194cbd0dc28fe0adc56ccda78ae3

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
19-01-2025 14:44

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

anituner.chm
Size

213KB
MD5

ab12e5874b35462cede0942522be22e6
SHA1

e4f01fbbfc154ad8a00bbd08d81bd5e19a54e80d
SHA256

8006ed398a69095344fdfce74d90f7c7366916d0305fad09f252bfbf0e4b6055
SHA512

89e134e029e0a5f8bd368efb36a51573f29868608500d41025ec3069934481424a53de8474c513ced438a95a84cbda8cf8afa1069cb9a25a60f2a5f1b142c085
SSDEEP

6144:T4HwQZ+PKGrILE9j/wruN+VnN55hnmJ2Tci/ZknF:MQ+aKGsLGj/ZN+VxhnjHZW

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3533259084-2542256011-65585152-1000\Software\Microsoft\Internet Explorer\Main	hh.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2360	hh.exe
2360	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\anituner.chm
1⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2360

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads