121b856e931732998abebc2716e3794e434e9329463a1a023b6f29c51d7034de | Triage

Analysis

max time kernel
122s
max time network
128s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
06-10-2023 13:16

Sharing

Report Analysis Logs

General

Target

Direzione.url
Size

198B
MD5

a01b0f3d5e1f18dc90623bc4f490f444
SHA1

0b4c08612e5b1cb5c4eabdda73ac8a6a017a0a48
SHA256

c20129af33139bf212fc3258d2701201e7e1120262890b952314a9068b52aca4
SHA512

089308e776a49953b42741a1d129b7d6bc941df02d8bf052bad9a2256f21bd9402153524ebb910a3f01927f50b4ca82364e5b11b72301ed01c1c56056db7658b

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

rundll32.exe

pid process

2964 rundll32.exe

C:\Windows\System32\rundll32.exe
"C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL C:\Users\Admin\AppData\Local\Temp\Direzione.url
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:2964

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2964-0-0x00000000021C0000-0x00000000021C1000-memory.dmp

Filesize
4KB

Download
memory/2964-1-0x00000000021C0000-0x00000000021C1000-memory.dmp

Filesize
4KB

Download