015aaa9c91d888a233b64e9a593929175a70055c8a4295d8a1d0d35aa4e94019 | Triage™

Analysis

max time kernel
122s
max time network
132s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
03/10/2023, 04:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
AgenziaEntrate.url
Size 192B
Sample231003-ffn9aaab63
SHA256 fe321c7dffa233a79666f957dd6a03dfcdbaac418eb2b17a1e2edd4766bd55a0
MD5 d65a89d1e17f4062addad5a8a2a49742
SHA1 23d21346fc25ef074d4195c5e895deacdbe8800f
SHA512 df5142bc3d2757751769f9525d265d85d538346a8ecda8c4737936d3042a2345556971becc9e0841cb6b408060d6e202576c8b01c6d1fd439059f1e170d1e03f
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2080	rundll32.exe

C:\Windows\System32\rundll32.exe
"C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL C:\Users\Admin\AppData\Local\Temp\AgenziaEntrate.url
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:2080

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2080-0-0x0000000001DF0000-0x0000000001DF1000-memory.dmp

Download

memory/2080-1-0x0000000001DF0000-0x0000000001DF1000-memory.dmp

Download