89b66559846497a7d16b242ad2c886c250d0431bcfc8bf2f30d31a8ff24fb6b9 | Triage

Analysis

max time kernel
227s
max time network
74s
platform
windows7_x64
resource
win7v200217
submitted
02-04-2020 15:59

Sharing

Report Analysis Logs

General

Target

sample.xls
Size

113KB
MD5

0e3bf9cbb3a039aa2b7a9b099e08d773
SHA1

de641034eed472a8571d367c715d13fc2d75dd8d
SHA256

ca69dbab2f4809aaabd5741447ac100ca0d4784b0905fa0adbbf85f0b5dbf07c
SHA512

698c151f15c16f8c5ca21f5d738c39a96540e05a480c263301a6703a692b8e3c2f901ac04ac17f31ebedd3116af8835c57bf1432fc5a557f5f6c1d901300f020

Score

1^/10

Malware Config

Signatures

Suspicious behavior: AddClipboardFormatListener 1 IoCs

Processes:

EXCEL.EXE

pid process

1844 EXCEL.EXE
Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

EXCEL.EXE

pid process

1844 EXCEL.EXE
1844 EXCEL.EXE
1844 EXCEL.EXE

C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /dde C:\Users\Admin\AppData\Local\Temp\sample.xls
1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:1844

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...