Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    28-09-2023 02:51

General

  • Target

    Agenzia_Entrate.url

  • Size

    193B

  • MD5

    8700ae84ce3630a8321b710be0ee3316

  • SHA1

    dcdef6d4bfb7b239bd351e1fee2785cdfc2fb8dd

  • SHA256

    7581bddb9275a5cf702ff7376a3ec41e2c51c745a08be4bd874f5e831859cb38

  • SHA512

    e93025559ccb84bf1fddb775165e64bacd3b6dd7551451769fcbeef1e45007cc6c86aa0e63c6d551819031fc6a48ed096db114e8b6e128fd6b2bc3837f1e9e71

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Windows\System32\rundll32.exe
    "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL C:\Users\Admin\AppData\Local\Temp\Agenzia_Entrate.url
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    PID:2072

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2072-0-0x00000000022C0000-0x00000000022C1000-memory.dmp

    Filesize

    4KB

  • memory/2072-1-0x00000000022C0000-0x00000000022C1000-memory.dmp

    Filesize

    4KB