bbab96aeb38f8c35cbb8e95976bbefa62cee70cb9f272c4f40cd227ab7153ffe | Triage™

Analysis

max time kernel
128s
max time network
34s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
02/03/2023, 10:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Agenzia_Entrate/Agenzia_Entrate.url
Size 192B
Sample230302-m3erpace93
SHA256 6537bdbd6b350022b95421209e5eb8cfd851a556904dd5b7b8a9189b21d40efb
MD5 7c979eb1d63d67578329c6c9265046ef
SHA1 da995fa37d041a53c5f510370c314737ad1c23cc
SHA512 617b46a391ac42a93f68e4b4739a0ff9516d73e9761e6a4bc8194b6bb3d633350dcadc29d89bab179953c0908e526ea2a409fc6425c30fdd893a9b1d40c855a3
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1336	rundll32.exe

C:\Windows\System32\rundll32.exe
"C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL C:\Users\Admin\AppData\Local\Temp\Agenzia_Entrate\Agenzia_Entrate.url
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:1336

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1336-54-0x0000000002380000-0x0000000002381000-memory.dmp

Download