1099b3990cb4ab172739f73b9bb0966eb832ab81859c05a5bb6b88bbdf168778 | Triage

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
13/02/2024, 02:37

Sharing

Report Analysis Logs

General

Target

1099b3990cb4ab172739f73b9bb0966eb832ab81859c05a5bb6b88bbdf168778.url
Size

147B
MD5

98040856f795f734ea829c47db2e3fab
SHA1

db8d27ae8018768cb98da8621ebdce50b7e8c10e
SHA256

1099b3990cb4ab172739f73b9bb0966eb832ab81859c05a5bb6b88bbdf168778
SHA512

c90687c88a5f090bf25db177ff6cea5b693269b535b62163962d36812120a6411782617af52278ccee0149bad5cc6f2bcadbaba7298d84b6f468ea6dff1b2546

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1948	rundll32.exe

C:\Windows\System32\rundll32.exe
"C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL C:\Users\Admin\AppData\Local\Temp\1099b3990cb4ab172739f73b9bb0966eb832ab81859c05a5bb6b88bbdf168778.url
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:1948

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1948-0-0x0000000002810000-0x0000000002811000-memory.dmp

Filesize
4KB

Download
memory/1948-1-0x0000000002810000-0x0000000002811000-memory.dmp

Filesize
4KB

Download