120b092e8d8212a7c0e796ac320dd10c56c8b801aa8fb234cb577d5f0dabc05c | Triage™

Analysis

max time kernel
128s
max time network
31s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
08/03/2023, 13:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
contratto/contratto.url
Size 191B
Sample230308-qmtgpaaa87
SHA256 257413c17f63500a76f9d0216a8dee283021299a61dc0539e6e870fd5d78177b
MD5 c57ce09111a84d1110b24a8505ff5804
SHA1 9fd1e2577f10a24c2678803e073d35e41b551eb2
SHA512 71cf1e5d069a75be84cfcaf82479fb037e75055c05e94ad212453769288b1e3b194156fad802619b0850c9e9abb3c045600779de234b8b51505b1a54f46b7c84
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1740	rundll32.exe

C:\Windows\System32\rundll32.exe
"C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL C:\Users\Admin\AppData\Local\Temp\contratto\contratto.url
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:1740

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1740-54-0x0000000002400000-0x0000000002401000-memory.dmp

Download