1f233fdb94239fa884321a91d14342c1a66e64ce02dc64378cb7c53669d5ea28 | Triage

Analysis

max time kernel
125s
max time network
33s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
10-03-2023 09:36

Sharing

Report Analysis Logs

General

Target

Agenzia_Entrate/Agenzia_Entrate.url
Size

191B
MD5

c57ce09111a84d1110b24a8505ff5804
SHA1

9fd1e2577f10a24c2678803e073d35e41b551eb2
SHA256

257413c17f63500a76f9d0216a8dee283021299a61dc0539e6e870fd5d78177b
SHA512

71cf1e5d069a75be84cfcaf82479fb037e75055c05e94ad212453769288b1e3b194156fad802619b0850c9e9abb3c045600779de234b8b51505b1a54f46b7c84

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

rundll32.exe

pid process

1244 rundll32.exe

C:\Windows\System32\rundll32.exe
"C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL C:\Users\Admin\AppData\Local\Temp\Agenzia_Entrate\Agenzia_Entrate.url
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:1244

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1244-54-0x0000000001DF0000-0x0000000001DF1000-memory.dmp

Filesize
4KB

Download