2110da33cfe1eaecd05be82b4717cd7381665f5c729a67c7671e612bae06fc24 | Triage

Analysis

max time kernel
120s
max time network
123s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
13-10-2023 14:47

Sharing

Report Analysis Logs

General

Target

Azienda.url
Size

193B
MD5

385b2d1cc0f48c9b113009619258b210
SHA1

2a956120277957bf6b11ec05568e148cb1c0bc7c
SHA256

589deb6665a90960cfbe3db62f3477f9a2087a2b2eb03d1a19ea69374a9eb34e
SHA512

a82d7f78c72d8ba1849473a7ac2536e1c332289fbdf11c6ea6f5de6f182208871a4ccb59a0f5facccdd6d0c78e9c9e10dcfe4aa067426fe0ce69358477364e18

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

rundll32.exe

pid process

2892 rundll32.exe

C:\Windows\System32\rundll32.exe
"C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL C:\Users\Admin\AppData\Local\Temp\Azienda.url
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:2892

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2892-0-0x0000000001DF0000-0x0000000001DF1000-memory.dmp

Filesize
4KB

Download
memory/2892-1-0x0000000001DF0000-0x0000000001DF1000-memory.dmp

Filesize
4KB

Download