ff60f197ec9751e4a6b6116e90a3076b613fd8c6451aa102605fe0f769596d45 | Triage™

Analysis

max time kernel
128s
max time network
33s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
22/03/2023, 15:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Servizi/Servizi.url
Size 194B
Sample230322-srwtqahe82
SHA256 ec178c6a29aa42213ac7287e45d8378632e145ef650dd5734f247129bd364dbb
MD5 7223cc1975393443d4d161492d0f932e
SHA1 2fc8c648559e862b3191088450781b5d33debd5f
SHA512 5c5eec290b156c760c44dd9b7162a5cf9e3f2f4e1f9ef494dcbf5ef2f12fd51801b1170b36f39ab2342467f7701bfe4bd292b7cd5418c4b87717e7abfc31ef5a
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1392	rundll32.exe

C:\Windows\System32\rundll32.exe
"C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL C:\Users\Admin\AppData\Local\Temp\Servizi\Servizi.url
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:1392

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1392-54-0x0000000001D70000-0x0000000001D71000-memory.dmp

Download