2d7ec9700f090d3802892e950752f3e6ecf5f9005f4884fc38fe190951a097a8 | Triage

Analysis

max time kernel
107s
max time network
91s
platform
windows7_x64
resource
win7v200217
submitted
02-04-2020 15:01

Sharing

Report Analysis Logs

General

Target

xl4_.xls
Size

181KB
MD5

45110d49f71fb6505dcf0bc807399eb9
SHA1

0aefb1b8973eb67f36efb7ba4fdda48316194db9
SHA256

2d7ec9700f090d3802892e950752f3e6ecf5f9005f4884fc38fe190951a097a8
SHA512

7e188e989c158326eea35a8d28058589d8a60da4a3aff325e3feb1b8ad8307483ea0abd786dff20b686983b688ef9f100ac8f89ced3d727f5e82ad0552a49987

Score

1^/10

Malware Config

Signatures

Suspicious behavior: AddClipboardFormatListener 1 IoCs

Processes:

EXCEL.EXE

pid process

1840 EXCEL.EXE
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

EXCEL.EXE

pid process

1840 EXCEL.EXE
1840 EXCEL.EXE
1840 EXCEL.EXE
1840 EXCEL.EXE

C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /dde C:\Users\Admin\AppData\Local\Temp\xl4_.xls
1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:1840

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...