a9ea9e40f12e969624fed4710df884076b80b97b7a29e5e830c01e9c4e46596a | Triage

Analysis

max time kernel
120s
max time network
141s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
12-10-2023 14:07

Sharing

Report Analysis Logs

General

Target

Documenti.url
Size

195B
MD5

4d7d46f082ea539ffef896638e7f621e
SHA1

f1b9e5c62fe28ba60f7977bc9ff7a48124d40294
SHA256

2d58ddd8ca73f4eff0945a3537e0a7bf888fdf7fb963ef43d8e07f5517404f69
SHA512

9f14c82416a0861348cec391c9f87664bd0772a5bfd973c3ad0ab6bb071df5778781d2ba5dbcedfbc65d26c58c86eb9d14a8299cecd611e9dfedabbbf1fa922e

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

rundll32.exe

pid process

2960 rundll32.exe

C:\Windows\System32\rundll32.exe
"C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL C:\Users\Admin\AppData\Local\Temp\Documenti.url
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:2960

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2960-0-0x0000000002140000-0x0000000002141000-memory.dmp

Filesize
4KB

Download
memory/2960-1-0x0000000002140000-0x0000000002141000-memory.dmp

Filesize
4KB

Download