5d6dac0c7c3fe4891bb4b8d3ada9caaa72dcedf8ec83025331700f208bb493f6 | Triage™

Analysis

max time kernel
128s
max time network
34s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
14/03/2023, 08:40

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
contratto/contratto.txt.url
Size 195B
Sample230314-kkwldaed65
SHA256 c80b9eaec33249302be9f38eb6ad9212a82197d853e15450d672f363f5fdd81e
MD5 c732fd1c70a873440f512d62de7e3045
SHA1 1bdb1a30228b5071cc1d5793bf021be517b8ed41
SHA512 cb5f8beeea2d42e3a774690d0c084775ed7641bd749d724b708850c5755482d3adb48fb6ae3fcfd472cbbe1d51d5ce36d7c94e566186d9d5712b5c05c50c1169
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
912	rundll32.exe

C:\Windows\System32\rundll32.exe
"C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL C:\Users\Admin\AppData\Local\Temp\contratto\contratto.txt.url
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:912

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/912-54-0x0000000001D70000-0x0000000001D71000-memory.dmp

Download