b3c5e464e43d7db2432f3e28de75bd0eee8fa7a2b7b6fef7134e7115d6681be3 | Triage

Analysis

max time kernel
119s
max time network
124s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
25-03-2024 14:35

Sharing

Report Analysis Logs

General

Target

$RECYCLE.BIN/$R9BVFJO.url
Size

192B
MD5

30b15d0074689b2b57391607ce87184d
SHA1

a8bb35e64db7774eecd9bc9c684677215cbd22ff
SHA256

be7c237538f353211d999453405525df568567de5674dc1ffda5773a7cb0be8b
SHA512

9aa9dd3bfefc57297390763715ddc2882797a37dcdfa619ba41cced889f864f88bba18c130e6fc2d15293abc8e884ef8cbfba48371205b62a87ca583357db465

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

rundll32.exe

pid process

1404 rundll32.exe

C:\Windows\System32\rundll32.exe
"C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL C:\Users\Admin\AppData\Local\Temp\$RECYCLE.BIN\$R9BVFJO.url
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:1404

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1404-0-0x0000000001C90000-0x0000000001C91000-memory.dmp

Filesize
4KB

Download