35d99e0bc26a29a4e8a4b3a0fee0724a494675b76745dbadbc2f8afa81c5ac49 | Triage™

Analysis

max time kernel
131s
max time network
30s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
14/03/2023, 08:40

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
azienda/azienda.txt.url
Size 195B
Sample230314-kkwldaed64
SHA256 67f14cb9d372a7a295a96a82f2eab679b7373f3613df6b8dcf9434482047caa1
MD5 cc689d7d4fa6905ebc5958630848fa00
SHA1 3d0ca3eeb7a45d2367b0693188ba99cf68f6a520
SHA512 974c9c969029636eb6db168cc65ddaed096b2695815107f8f0c14da0ab419c7ac25c76a8f16eeaad03102efcd918991f11e7a9685a1fb94a851280349862efdd
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2036	rundll32.exe

C:\Windows\System32\rundll32.exe
"C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL C:\Users\Admin\AppData\Local\Temp\azienda\azienda.txt.url
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:2036

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2036-54-0x00000000021C0000-0x00000000021C1000-memory.dmp

Download