1fede186e9d9666ce4eff1882ce3bdca66c9a121ea9773d8e57747912e8ad57e | Triage

Analysis

max time kernel
125s
max time network
30s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
14-03-2023 08:15

Sharing

Report Analysis Logs

General

Target

Agenzia/Agenzia.txt.url
Size

195B
MD5

cc689d7d4fa6905ebc5958630848fa00
SHA1

3d0ca3eeb7a45d2367b0693188ba99cf68f6a520
SHA256

67f14cb9d372a7a295a96a82f2eab679b7373f3613df6b8dcf9434482047caa1
SHA512

974c9c969029636eb6db168cc65ddaed096b2695815107f8f0c14da0ab419c7ac25c76a8f16eeaad03102efcd918991f11e7a9685a1fb94a851280349862efdd

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

rundll32.exe

pid process

1084 rundll32.exe

C:\Windows\System32\rundll32.exe
"C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL C:\Users\Admin\AppData\Local\Temp\Agenzia\Agenzia.txt.url
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:1084

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1084-54-0x0000000002180000-0x0000000002181000-memory.dmp

Filesize
4KB

Download