32d30608f82ff1d92e4952bc12e4337f250093fcff7b88d7f01e8c7cae47d9c3 | Triage™

Analysis

max time kernel
117s
max time network
126s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
03/10/2023, 04:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Amministrazione.url
Size 192B
Sample231003-ffn9aaab65
SHA256 59944e8c11bfc2d065ef88fca0a033313361ae424962c34573755da99badbf3f
MD5 c6c6f5a3d3e0444820d2865c7f1a07bc
SHA1 5f9c9620e315b09802e8e532f48195a9e60f2d2c
SHA512 4a1a66efff8336bbde327c9256e6e473193c901bc47d1b7648bbfa29212490f3f47092ba060c47cc77a1e6952f6bf814346045d2d1c1eef556ba07d08f69c628
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2416	rundll32.exe

C:\Windows\System32\rundll32.exe
"C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL C:\Users\Admin\AppData\Local\Temp\Amministrazione.url
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:2416

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2416-0-0x00000000021C0000-0x00000000021C1000-memory.dmp

Download

memory/2416-1-0x00000000021C0000-0x00000000021C1000-memory.dmp

Download