b3c5e464e43d7db2432f3e28de75bd0eee8fa7a2b7b6fef7134e7115d6681be3 | Triage

Analysis

max time kernel
119s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
25-03-2024 14:35

Sharing

Report Analysis Logs

General

Target

$RECYCLE.BIN/$R6AKHCZ.url
Size

141B
MD5

0de440fa9e6012b525dbddeea04f5fbd
SHA1

e8a74bf4989eee88a071057b3ed402b7662df498
SHA256

5bb39c8f533ef487b406d3195a274bba69e538a4d3b49b7f80e8fa6b4804c0e6
SHA512

c416da23e60c9183d6193fcc8137196f02d3db0a662c7a5802630177cd7cfc7afc3d052778b576f12d2a68620ddf922d72810a11a24bab6c8c6e06c0cd697715

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

rundll32.exe

pid process

1292 rundll32.exe

C:\Windows\System32\rundll32.exe
"C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL C:\Users\Admin\AppData\Local\Temp\$RECYCLE.BIN\$R6AKHCZ.url
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:1292

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1292-0-0x0000000001EB0000-0x0000000001EB1000-memory.dmp

Filesize
4KB

Download