463174e74e8c212a4024f1ccc1bf4490d2ffe6d5ef9c573cc512c5b996adb437 | Triage

Analysis

max time kernel
128s
max time network
34s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
24-03-2023 11:23

Sharing

Report Analysis Logs

General

Target

Contratto/Contratto.url
Size

189B
MD5

084628be20c0cc112964dc4efe6dbc93
SHA1

5535112912b97b970ba4b3b7d51896658beadb46
SHA256

2e93682935ab93fcb97ede1f8aba8076adf5e440a40a407a96f97c1b3af5188f
SHA512

8f2864a3c09fd7db9b390ef50e90bdd540455dec909ed8ed7afb681517b11c9dfbb5ab205b975103b9d3c0e6d44eca1a30c7af905593b5d72d6541b8b2bf6c8a

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

rundll32.exe

pid process

1284 rundll32.exe

C:\Windows\System32\rundll32.exe
"C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL C:\Users\Admin\AppData\Local\Temp\Contratto\Contratto.url
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:1284

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1284-54-0x00000000021C0000-0x00000000021C1000-memory.dmp

Filesize
4KB

Download