a43f7e57a2a6e00480baf95d1e9c82332796fbb4b4873046bd1ac9bca4f68075 | Triage

Analysis

max time kernel
122s
max time network
125s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
10-10-2023 12:19

Sharing

Report Analysis Logs

General

Target

Documenti.url
Size

193B
MD5

605a545fcf4bdb9f72cccce6f96c3b00
SHA1

3f46e6be5166cbe2e998f82d7bc43485c26ddbcf
SHA256

96a8224726b8ce8b29315536fb4b1ed66f568f9a97c0d630316dba3e5b6a5a3e
SHA512

9a70438d175c889d05e97e69ad284a5f206aa7b8267f3e7c33ee8413580bbc83dec603d16ad30550e046badbc1650ab742e02781880e7a11ae9abe0983dfbd0e

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

rundll32.exe

pid process

2936 rundll32.exe

C:\Windows\System32\rundll32.exe
"C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL C:\Users\Admin\AppData\Local\Temp\Documenti.url
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:2936

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2936-0-0x0000000001F30000-0x0000000001F31000-memory.dmp

Filesize
4KB

Download
memory/2936-1-0x0000000001F30000-0x0000000001F31000-memory.dmp

Filesize
4KB

Download